From bb4deb1ae9346254c19bfd46208fe336a2370b91 Mon Sep 17 00:00:00 2001
From: Fred KISSIE <fredkiss3@gmail.com>
Date: Fri, 3 Jul 2026 21:05:16 +0200
Subject: [PATCH 01/94] =?UTF-8?q?=E2=9C=A8=20remember=20last=20used=20idp?=
 =?UTF-8?q?=20in=20dashboard=20login=20form?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/components/LoginForm.tsx | 55 +++++++++++++++++++++++-------------
 1 file changed, 36 insertions(+), 19 deletions(-)

diff --git a/src/components/LoginForm.tsx b/src/components/LoginForm.tsx
index fe3c80667..40685f846 100644
--- a/src/components/LoginForm.tsx
+++ b/src/components/LoginForm.tsx
@@ -30,10 +30,7 @@ import Link from "next/link";
 import { GenerateOidcUrlResponse } from "@server/routers/idp";
 import { Separator } from "./ui/separator";
 import { useTranslations } from "next-intl";
-import {
-    generateOidcUrlProxy,
-    loginProxy
-} from "@app/actions/server";
+import { generateOidcUrlProxy, loginProxy } from "@app/actions/server";
 import { redirect as redirectTo } from "next/navigation";
 import { useEnvContext } from "@app/hooks/useEnvContext";
 import IdpTypeIcon from "@app/components/IdpTypeIcon";
@@ -41,6 +38,7 @@ import IdpTypeIcon from "@app/components/IdpTypeIcon";
 import { loadReoScript } from "reodotdev";
 import { build } from "@server/build";
 import MfaInputForm from "@app/components/MfaInputForm";
+import { useLocalStorage } from "@app/hooks/useLocalStorage";
 
 export type LoginFormIDP = {
     idpId: number;
@@ -105,7 +103,6 @@ export default function LoginForm({
         }
     }, []);
 
-
     const formSchema = z.object({
         email: z.string().email({ message: t("emailInvalid") }),
         password: z.string().min(8, { message: t("passwordRequirementsChars") })
@@ -130,6 +127,10 @@ export default function LoginForm({
         }
     });
 
+    const [lastUsedIdpId, setLastUsedIdpId] = useLocalStorage<string | null>(
+        "login:last-used-idp",
+        null
+    );
 
     async function onSubmit(values: any) {
         const { email, password } = form.getValues();
@@ -179,8 +180,7 @@ export default function LoginForm({
             if (data.useSecurityKey) {
                 setError(
                     t("securityKeyRequired", {
-                        defaultValue:
-                            "Please use your security key to sign in."
+                        defaultValue: "Please use your security key to sign in."
                     })
                 );
                 return;
@@ -242,6 +242,8 @@ export default function LoginForm({
 
     async function loginWithIdp(idpId: number) {
         let redirectUrl: string | undefined;
+
+        setLastUsedIdpId(idpId.toString());
         try {
             const data = await generateOidcUrlProxy(
                 idpId,
@@ -356,7 +358,6 @@ export default function LoginForm({
             )}
 
             <div className="space-y-4">
-
                 {!mfaRequested && (
                     <>
                         <SecurityKeyAuthButton
@@ -385,25 +386,41 @@ export default function LoginForm({
                                         idp.variant || idp.name.toLowerCase();
 
                                     return (
-                                        <Button
+                                        <div
+                                            className="w-full relative"
                                             key={idp.idpId}
-                                            type="button"
-                                            variant="outline"
-                                            className="w-full inline-flex items-center space-x-2"
-                                            onClick={() => {
-                                                loginWithIdp(idp.idpId);
-                                            }}
                                         >
-                                            <IdpTypeIcon type={effectiveType} size={16} />
-                                            <span>{idp.name}</span>
-                                        </Button>
+                                            <Button
+                                                key={idp.idpId}
+                                                type="button"
+                                                variant="outline"
+                                                className="w-full inline-flex items-center space-x-2 after:absolute after:inset-0 after:z-10"
+                                                onClick={() => {
+                                                    loginWithIdp(idp.idpId);
+                                                }}
+                                            >
+                                                <IdpTypeIcon
+                                                    type={effectiveType}
+                                                    size={16}
+                                                />
+                                                <span>{idp.name}</span>
+                                            </Button>
+
+                                            {lastUsedIdpId ===
+                                                idp.idpId.toString() && (
+                                                <div className="absolute inset-0">
+                                                    <span className="absolute top-0 right-0 text-xs bg-primary text-primary-foreground rounded-bl-sm rounded-tr-sm px-2 py-0.5">
+                                                        {t("idpLastUsed")}
+                                                    </span>
+                                                </div>
+                                            )}
+                                        </div>
                                     );
                                 })}
                             </>
                         )}
                     </>
                 )}
-
             </div>
         </div>
     );

From 05bf77da295aaf2a93c3cfb4dbd5f4161898e949 Mon Sep 17 00:00:00 2001
From: Fred KISSIE <fredkiss3@gmail.com>
Date: Fri, 3 Jul 2026 21:05:47 +0200
Subject: [PATCH 02/94] =?UTF-8?q?=E2=99=BB=EF=B8=8F=20remove=20`cache`=20o?=
 =?UTF-8?q?n=20`verifySession`=20calls=20as=20it's=20already=20wrapped=20i?=
 =?UTF-8?q?n=20`cache`?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/app/auth/login/page.tsx | 3 +--
 src/app/page.tsx            | 5 +----
 2 files changed, 2 insertions(+), 6 deletions(-)

diff --git a/src/app/auth/login/page.tsx b/src/app/auth/login/page.tsx
index 274cab561..cdb05c71d 100644
--- a/src/app/auth/login/page.tsx
+++ b/src/app/auth/login/page.tsx
@@ -29,8 +29,7 @@ export default async function Page(props: {
     searchParams: Promise<{ [key: string]: string | string[] | undefined }>;
 }) {
     const searchParams = await props.searchParams;
-    const getUser = cache(verifySession);
-    const user = await getUser({ skipCheckVerifyEmail: true });
+    const user = await verifySession({ skipCheckVerifyEmail: true });
 
     const isInvite = searchParams?.redirect?.includes("/invite");
     const forceLoginParam = searchParams?.forceLogin;
diff --git a/src/app/page.tsx b/src/app/page.tsx
index 7f0f05b57..84a14cb5c 100644
--- a/src/app/page.tsx
+++ b/src/app/page.tsx
@@ -5,7 +5,6 @@ import UserProvider from "@app/providers/UserProvider";
 import { ListUserOrgsResponse } from "@server/routers/org";
 import { AxiosResponse } from "axios";
 import { redirect } from "next/navigation";
-import { cache } from "react";
 import OrganizationLanding from "@app/components/OrganizationLanding";
 import { pullEnv } from "@app/lib/pullEnv";
 import { cleanRedirect } from "@app/lib/cleanRedirect";
@@ -13,7 +12,6 @@ import { Layout } from "@app/components/Layout";
 import RedirectToOrg from "@app/components/RedirectToOrg";
 import { InitialSetupCompleteResponse } from "@server/routers/auth";
 import { cookies } from "next/headers";
-import { build } from "@server/build";
 
 export const dynamic = "force-dynamic";
 
@@ -27,8 +25,7 @@ export default async function Page(props: {
 
     const env = pullEnv();
 
-    const getUser = cache(verifySession);
-    const user = await getUser({ skipCheckVerifyEmail: true });
+    const user = await verifySession({ skipCheckVerifyEmail: true });
 
     let complete = false;
     try {

From a74c0c227c1df7d3909fe48223f82a05053a85f3 Mon Sep 17 00:00:00 2001
From: Fred KISSIE <fredkiss3@gmail.com>
Date: Fri, 3 Jul 2026 21:05:53 +0200
Subject: [PATCH 03/94] =?UTF-8?q?=F0=9F=8C=90=20text?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 messages/en-US.json | 1 +
 1 file changed, 1 insertion(+)

diff --git a/messages/en-US.json b/messages/en-US.json
index 4701d4da1..5d774c50b 100644
--- a/messages/en-US.json
+++ b/messages/en-US.json
@@ -1503,6 +1503,7 @@
     "otpAuthDescription": "Enter the code from your authenticator app or one of your single-use backup codes.",
     "otpAuthSubmit": "Submit Code",
     "idpContinue": "Or continue with",
+    "idpLastUsed": "Last used",
     "otpAuthBack": "Back to Password",
     "navbar": "Navigation Menu",
     "navbarDescription": "Main navigation menu for the application",

From 289be30e6b17a28f4dd216889e1e39508cae3c50 Mon Sep 17 00:00:00 2001
From: Fred KISSIE <fredkiss3@gmail.com>
Date: Fri, 3 Jul 2026 22:33:51 +0200
Subject: [PATCH 04/94] =?UTF-8?q?=E2=9C=A8=20show=20last=20used=20login=20?=
 =?UTF-8?q?idp=20in=20smart=20login=20form?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/app/auth/login/page.tsx        | 44 ++++++++++++++--
 src/components/IdpLoginButtons.tsx | 80 ++++++++++++++++++++----------
 src/components/SmartLoginForm.tsx  | 15 +++++-
 src/lib/consts.ts                  |  1 +
 src/lib/setClientCookie.ts         | 32 ++++++++++++
 5 files changed, 139 insertions(+), 33 deletions(-)
 create mode 100644 src/lib/consts.ts
 create mode 100644 src/lib/setClientCookie.ts

diff --git a/src/app/auth/login/page.tsx b/src/app/auth/login/page.tsx
index cdb05c71d..92097512c 100644
--- a/src/app/auth/login/page.tsx
+++ b/src/app/auth/login/page.tsx
@@ -16,8 +16,11 @@ import LoginCardHeader from "@app/components/LoginCardHeader";
 import { priv } from "@app/lib/api";
 import { AxiosResponse } from "axios";
 import { LoginFormIDP } from "@app/components/LoginForm";
-import { ListIdpsResponse } from "@server/routers/idp";
+import { ListIdpsResponse, type GetIdpResponse } from "@server/routers/idp";
 import type { Metadata } from "next";
+import { cookies } from "next/headers";
+import { LAST_USED_IDP_COOKIE_NAME } from "@app/lib/consts";
+import z from "zod";
 
 export const metadata: Metadata = {
     title: "Log In"
@@ -31,6 +34,8 @@ export default async function Page(props: {
     const searchParams = await props.searchParams;
     const user = await verifySession({ skipCheckVerifyEmail: true });
 
+    const lastUsedIdpCookie = (await cookies()).get(LAST_USED_IDP_COOKIE_NAME);
+
     const isInvite = searchParams?.redirect?.includes("/invite");
     const forceLoginParam = searchParams?.forceLogin;
     const forceLogin = forceLoginParam === "true";
@@ -84,19 +89,47 @@ export default async function Page(props: {
         (build === "enterprise" && env.app.identityProviderMode === "org");
 
     let loginIdps: LoginFormIDP[] = [];
+    let lastUsedIdpForSmartLogin: (LoginFormIDP & { orgId?: string }) | null =
+        null;
     if (!useSmartLogin) {
         // Load IdPs for DashboardLoginForm (OSS or org-only IdP mode)
         if (build === "oss" || env.app.identityProviderMode !== "org") {
-            const idpsRes = await cache(
-                async () =>
-                    await priv.get<AxiosResponse<ListIdpsResponse>>("/idp")
-            )();
+            const idpsRes =
+                await priv.get<AxiosResponse<ListIdpsResponse>>("/idp");
             loginIdps = idpsRes.data.data.idps.map((idp) => ({
                 idpId: idp.idpId,
                 name: idp.name,
                 variant: idp.type
             })) as LoginFormIDP[];
         }
+    } else {
+        if (lastUsedIdpCookie) {
+            const lastUsedIdpSchema = z.object({
+                orgId: z.string().optional(),
+                idpId: z.number()
+            });
+            try {
+                const persistedData = lastUsedIdpSchema.parse(
+                    JSON.parse(lastUsedIdpCookie.value)
+                );
+
+                const idpRes = await priv.get<AxiosResponse<GetIdpResponse>>(
+                    `/idp/${persistedData.idpId}`
+                );
+
+                const idp = idpRes.data.data.idp;
+
+                lastUsedIdpForSmartLogin = {
+                    idpId: idp.idpId,
+                    name: idp.name,
+                    variant: idp.type,
+                    orgId: persistedData.orgId,
+                    lastUsed: true
+                };
+            } catch (error) {
+                // the idp might not exist or the data is malformatted, skip this
+            }
+        }
     }
 
     const t = await getTranslations();
@@ -159,6 +192,7 @@ export default async function Page(props: {
                                 redirect={redirectUrl}
                                 forceLogin={forceLogin}
                                 defaultUser={defaultUser}
+                                lastUsedIdp={lastUsedIdpForSmartLogin}
                                 orgSignIn={
                                     !isInvite &&
                                     (build === "saas" ||
diff --git a/src/components/IdpLoginButtons.tsx b/src/components/IdpLoginButtons.tsx
index d015dce52..0851a0dd0 100644
--- a/src/components/IdpLoginButtons.tsx
+++ b/src/components/IdpLoginButtons.tsx
@@ -1,26 +1,25 @@
 "use client";
 
-import { useEffect, useState } from "react";
-import { Button } from "@app/components/ui/button";
-import { Alert, AlertDescription } from "@app/components/ui/alert";
-import { useTranslations } from "next-intl";
+import { generateOidcUrlProxy } from "@app/actions/server";
 import IdpTypeIcon from "@app/components/IdpTypeIcon";
-import {
-    generateOidcUrlProxy,
-    type GenerateOidcUrlResponse
-} from "@app/actions/server";
+import { Alert, AlertDescription } from "@app/components/ui/alert";
+import { Button } from "@app/components/ui/button";
+import { cleanRedirect } from "@app/lib/cleanRedirect";
+import { LAST_USED_IDP_COOKIE_NAME } from "@app/lib/consts";
+import { setClientCookie } from "@app/lib/setClientCookie";
+import { useTranslations } from "next-intl";
 import {
     redirect as redirectTo,
-    useParams,
+    useRouter,
     useSearchParams
 } from "next/navigation";
-import { useRouter } from "next/navigation";
-import { cleanRedirect } from "@app/lib/cleanRedirect";
+import { useEffect, useState, useTransition } from "react";
 
 export type LoginFormIDP = {
     idpId: number;
     name: string;
     variant?: string;
+    lastUsed?: boolean;
 };
 
 type IdpLoginButtonsProps = {
@@ -35,7 +34,6 @@ export default function IdpLoginButtons({
     orgId
 }: IdpLoginButtonsProps) {
     const [error, setError] = useState<string | null>(null);
-    const [loading, setLoading] = useState(false);
     const t = useTranslations();
 
     const params = useSearchParams();
@@ -52,10 +50,22 @@ export default function IdpLoginButtons({
         }
     }, []);
 
+    const [loading, startTransition] = useTransition();
+
     async function loginWithIdp(idpId: number) {
-        setLoading(true);
         setError(null);
 
+        setClientCookie(
+            LAST_USED_IDP_COOKIE_NAME,
+            JSON.stringify({
+                orgId,
+                idpId
+            }),
+            {
+                sameSite: "Lax"
+            }
+        );
+
         let redirectToUrl: string | undefined;
         try {
             console.log("generating", idpId, redirect || "/", orgId);
@@ -68,7 +78,6 @@ export default function IdpLoginButtons({
 
             if (response.error) {
                 setError(response.message);
-                setLoading(false);
                 return;
             }
 
@@ -84,7 +93,6 @@ export default function IdpLoginButtons({
                         "An unexpected error occurred. Please try again."
                 })
             );
-            setLoading(false);
         }
 
         if (redirectToUrl) {
@@ -124,20 +132,38 @@ export default function IdpLoginButtons({
                                 idp.variant || idp.name.toLowerCase();
 
                             return (
-                                <Button
+                                <div
+                                    className="w-full relative"
                                     key={idp.idpId}
-                                    type="button"
-                                    variant="outline"
-                                    className="w-full inline-flex items-center space-x-2"
-                                    onClick={() => {
-                                        loginWithIdp(idp.idpId);
-                                    }}
-                                    disabled={loading}
-                                    loading={loading}
                                 >
-                                    <IdpTypeIcon type={effectiveType} size={16} />
-                                    <span>{idp.name}</span>
-                                </Button>
+                                    <Button
+                                        key={idp.idpId}
+                                        type="button"
+                                        variant="outline"
+                                        className="w-full inline-flex items-center space-x-2  after:absolute after:inset-0 after:z-10"
+                                        onClick={() => {
+                                            startTransition(() =>
+                                                loginWithIdp(idp.idpId)
+                                            );
+                                        }}
+                                        disabled={loading}
+                                        loading={loading}
+                                    >
+                                        <IdpTypeIcon
+                                            type={effectiveType}
+                                            size={16}
+                                        />
+                                        <span>{idp.name}</span>
+                                    </Button>
+
+                                    {idp.lastUsed && (
+                                        <div className="absolute inset-0">
+                                            <span className="absolute top-0 right-0 text-xs bg-primary text-primary-foreground rounded-bl-sm rounded-tr-sm px-2 py-0.5">
+                                                {t("idpLastUsed")}
+                                            </span>
+                                        </div>
+                                    )}
+                                </div>
                             );
                         })}
                     </>
diff --git a/src/components/SmartLoginForm.tsx b/src/components/SmartLoginForm.tsx
index dd0e131df..de1955771 100644
--- a/src/components/SmartLoginForm.tsx
+++ b/src/components/SmartLoginForm.tsx
@@ -27,6 +27,8 @@ import UserProfileCard from "@app/components/UserProfileCard";
 import SecurityKeyAuthButton from "@app/components/SecurityKeyAuthButton";
 import { Separator } from "@app/components/ui/separator";
 import OrgSignInLink from "@app/components/OrgSignInLink";
+import type { LoginFormIDP } from "./LoginForm";
+import IdpLoginButtons from "./IdpLoginButtons";
 
 const identifierSchema = z.object({
     identifier: z.string().min(1, "Username or email is required")
@@ -53,6 +55,7 @@ type SmartLoginFormProps = {
     forceLogin?: boolean;
     defaultUser?: string;
     orgSignIn?: OrgSignInConfig;
+    lastUsedIdp?: (LoginFormIDP & { orgId?: string }) | null;
 };
 
 type ViewState =
@@ -89,7 +92,8 @@ export default function SmartLoginForm({
     redirect,
     forceLogin,
     defaultUser,
-    orgSignIn
+    orgSignIn,
+    lastUsedIdp
 }: SmartLoginFormProps) {
     const router = useRouter();
     const { env } = useEnvContext();
@@ -294,6 +298,15 @@ export default function SmartLoginForm({
                                 </span>
                             </div>
                         </div>
+
+                        {lastUsedIdp && (
+                            <IdpLoginButtons
+                                idps={[lastUsedIdp]}
+                                orgId={lastUsedIdp.orgId}
+                                redirect={redirect}
+                            />
+                        )}
+
                         <OrgSignInLink
                             href={orgSignIn.href}
                             linkText={orgSignIn.linkText}
diff --git a/src/lib/consts.ts b/src/lib/consts.ts
new file mode 100644
index 000000000..13f86484f
--- /dev/null
+++ b/src/lib/consts.ts
@@ -0,0 +1 @@
+export const LAST_USED_IDP_COOKIE_NAME = "p__last_used_idp";
diff --git a/src/lib/setClientCookie.ts b/src/lib/setClientCookie.ts
new file mode 100644
index 000000000..dad75b049
--- /dev/null
+++ b/src/lib/setClientCookie.ts
@@ -0,0 +1,32 @@
+/**
+ * Set a cookie on the client side in javascript code, not on the server
+ * @param name
+ * @param value
+ * @param days
+ * @param options
+ */
+export function setClientCookie(
+    name: string,
+    value: string,
+    options: {
+        days?: number;
+        path?: string;
+        secure?: boolean;
+        sameSite?: "Strict" | "Lax" | "None";
+    } = {}
+): void {
+    let cookie = `${encodeURIComponent(name)}=${encodeURIComponent(value)}`;
+
+    if (options.days) {
+        const date = new Date();
+        date.setTime(date.getTime() + options.days * 864e5);
+        cookie += `; expires=${date.toUTCString()}`;
+    }
+
+    cookie += `; path=${options.path ?? "/"}`;
+
+    if (options.secure) cookie += "; Secure";
+    if (options.sameSite) cookie += `; SameSite=${options.sameSite}`;
+
+    document.cookie = cookie;
+}

From 3d13e9105ca0078b6116d557bacb7c6f06b1513f Mon Sep 17 00:00:00 2001
From: Fred KISSIE <fredkiss3@gmail.com>
Date: Fri, 3 Jul 2026 22:33:58 +0200
Subject: [PATCH 05/94] =?UTF-8?q?=F0=9F=8F=B7=EF=B8=8F=20fix=20types?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/components/LoginForm.tsx | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/components/LoginForm.tsx b/src/components/LoginForm.tsx
index 40685f846..eef7406a7 100644
--- a/src/components/LoginForm.tsx
+++ b/src/components/LoginForm.tsx
@@ -44,6 +44,7 @@ export type LoginFormIDP = {
     idpId: number;
     name: string;
     variant?: string;
+    lastUsed?: boolean;
 };
 
 type LoginFormProps = {

From 2fe85ebda2d43c543d13b9c5e6730e7649e05bfb Mon Sep 17 00:00:00 2001
From: Fred KISSIE <fredkiss3@gmail.com>
Date: Wed, 8 Jul 2026 03:11:12 +0200
Subject: [PATCH 06/94] =?UTF-8?q?=E2=99=BB=EF=B8=8F=20set=20last=20IDP=20t?=
 =?UTF-8?q?o=20null=20if=20login=20with=20email=20+=20password?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/components/LoginForm.tsx | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/components/LoginForm.tsx b/src/components/LoginForm.tsx
index eef7406a7..82f948ca9 100644
--- a/src/components/LoginForm.tsx
+++ b/src/components/LoginForm.tsx
@@ -137,6 +137,7 @@ export default function LoginForm({
         const { email, password } = form.getValues();
         const { code } = mfaForm.getValues();
 
+        setLastUsedIdpId(null);
         setLoading(true);
         setError(null);
 

From 34d5c9535d3a9c4f029088cf2a4db905bd3ab2ab Mon Sep 17 00:00:00 2001
From: Fred KISSIE <fredkiss3@gmail.com>
Date: Fri, 10 Jul 2026 03:22:28 +0200
Subject: [PATCH 07/94] =?UTF-8?q?=E2=99=BB=EF=B8=8F=20delete=20last=20used?=
 =?UTF-8?q?=20IDP=20coookie=20when=20logging=20in=20with=20email/password?=
 =?UTF-8?q?=20on=20smart=20login=20form?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/components/LoginPasswordForm.tsx | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/src/components/LoginPasswordForm.tsx b/src/components/LoginPasswordForm.tsx
index d6e0c0b79..efbc8d727 100644
--- a/src/components/LoginPasswordForm.tsx
+++ b/src/components/LoginPasswordForm.tsx
@@ -22,6 +22,8 @@ import Link from "next/link";
 import { useEnvContext } from "@app/hooks/useEnvContext";
 import { cleanRedirect } from "@app/lib/cleanRedirect";
 import MfaInputForm from "@app/components/MfaInputForm";
+import { LAST_USED_IDP_COOKIE_NAME } from "@app/lib/consts";
+import { setClientCookie } from "@app/lib/setClientCookie";
 
 type LoginPasswordFormProps = {
     identifier: string;
@@ -82,6 +84,12 @@ export default function LoginPasswordForm({
         const { password } = values;
         const { code } = mfaForm.getValues();
 
+        // delete last used auth cookie by setting it in the past
+        setClientCookie(LAST_USED_IDP_COOKIE_NAME, JSON.stringify(null), {
+            sameSite: "Lax",
+            days: -1
+        });
+
         setLoading(true);
         setError(null);
 

From 8d018fe47da9ea50d5ab44e28d2679dfb74524bb Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Thu, 9 Jul 2026 21:28:48 -0400
Subject: [PATCH 08/94] Clean up

---
 server/lib/blueprints/applyBlueprint.ts           | 6 ------
 server/lib/blueprints/privateResources.ts         | 3 ---
 server/routers/siteResource/createSiteResource.ts | 3 ---
 3 files changed, 12 deletions(-)

diff --git a/server/lib/blueprints/applyBlueprint.ts b/server/lib/blueprints/applyBlueprint.ts
index c62dd4735..44646e0bf 100644
--- a/server/lib/blueprints/applyBlueprint.ts
+++ b/server/lib/blueprints/applyBlueprint.ts
@@ -34,12 +34,6 @@ import {
     rebuildClientAssociationsFromSiteResource,
     waitForSiteResourceRebuildIdle
 } from "../rebuildClientAssociations";
-import { build } from "@server/build";
-import HttpCode from "@server/types/HttpCode";
-import createHttpError from "http-errors";
-import next from "next";
-import { LimitId } from "../billing";
-import { usageService } from "../billing/usageService";
 
 type ApplyBlueprintArgs = {
     orgId: string;
diff --git a/server/lib/blueprints/privateResources.ts b/server/lib/blueprints/privateResources.ts
index 74a1f618f..aa146679f 100644
--- a/server/lib/blueprints/privateResources.ts
+++ b/server/lib/blueprints/privateResources.ts
@@ -26,9 +26,6 @@ import { createCertificate } from "#dynamic/routers/certificates/createCertifica
 import { isLicensedOrSubscribed } from "#dynamic/lib/isLicencedOrSubscribed";
 import { tierMatrix } from "../billing/tierMatrix";
 import { build } from "@server/build";
-import HttpCode from "@server/types/HttpCode";
-import createHttpError from "http-errors";
-import next from "next";
 import { LimitId } from "../billing";
 import { usageService } from "../billing/usageService";
 
diff --git a/server/routers/siteResource/createSiteResource.ts b/server/routers/siteResource/createSiteResource.ts
index eaf4cf130..365053cf1 100644
--- a/server/routers/siteResource/createSiteResource.ts
+++ b/server/routers/siteResource/createSiteResource.ts
@@ -56,7 +56,6 @@ const createSiteResourceSchema = z
         siteId: z.number().int().positive().optional(), // DEPRECATED: for backward compatibility, we will convert this to siteIds array if provided
         destinationPort: z.int().positive().optional(),
         destination: z.string().min(1).nullish(),
-        enabled: z.boolean().default(true),
         alias: z
             .string()
             .regex(
@@ -275,7 +274,6 @@ export async function createSiteResource(
             scheme,
             destinationPort,
             destination,
-            enabled,
             ssl,
             alias,
             userIds,
@@ -539,7 +537,6 @@ export async function createSiteResource(
                     destination: destination, // the ssh can be null
                     scheme,
                     destinationPort,
-                    enabled,
                     alias: alias ? alias.trim() : null,
                     aliasAddress,
                     tcpPortRangeString: tcpPortRangeStringAdjusted,

From d38f9ac2bb46ceaf720d97a059bf7d91098f5237 Mon Sep 17 00:00:00 2001
From: miloschwartz <mschwartz10612@gmail.com>
Date: Thu, 9 Jul 2026 21:32:35 -0400
Subject: [PATCH 09/94] update readme

---
 README.md                                |  42 +++++++++++++++++++++--
 public/screenshots/resource-launcher.png | Bin 0 -> 568945 bytes
 2 files changed, 39 insertions(+), 3 deletions(-)
 create mode 100644 public/screenshots/resource-launcher.png

diff --git a/README.md b/README.md
index ab857350e..1827f2570 100644
--- a/README.md
+++ b/README.md
@@ -41,7 +41,7 @@
     </strong>
 </p>
 
-Pangolin is an open-source, identity-based remote access platform built on WireGuard® that enables secure, seamless connectivity to private and public resources. Pangolin combines reverse proxy and VPN capabilities into one platform, providing browser-based access to web applications and client-based access to any private resources with NAT traversal, all with granular access controls.
+Pangolin is an open-source, identity-based remote access platform built on WireGuard® that enables secure connectivity to infrastructure anywhere. It combines reverse-proxy and VPN capabilities into one platform, providing browser-based access to web applications and client-based access to private resources with NAT traversal, all with granular access control.
 
 ## Installation
 
@@ -63,11 +63,26 @@ Pangolin is an open-source, identity-based remote access platform built on WireG
 
 Pangolin's site connectors provide gateways into networks so you can access any networked resources. Sites use outbound tunnels and intelligent NAT traversal to make networks behind restrictive firewalls available for authorized access without public IPs or open ports. Easily deploy a site as a binary or container on any platform.
 
+* Lightweight user-space connector runs anywhere
+* Punches through any firewall
+* Doesn't require open ports or a public IP
+* Strict network segmentation
+* WireGuard-based
+* Get alerts when a device or network resource goes down
+
 <img src="public/screenshots/sites.png" alt="Sites" width="100%" />
 
 ### Browser-based reverse proxy access
 
-Expose web applications through identity and context-aware tunneled reverse proxies. Users access applications through any web browser with authentication and granular access control without installing a client. Pangolin handles routing, load balancing, health checking, and automatic SSL certificates without exposing your network directly to the internet.
+Expose HTTPS web applications and connect to VNC, RDP, and SSH entirely in the browser through identity and context-aware tunneled reverse proxies. Users access resources with authentication and granular access control without installing a client. Pangolin handles routing, load balancing, health checking, and automatic SSL certificates without exposing your network directly to the internet.
+
+* Expose a web panel anywhere
+* Access via any web browser
+* Single sign-on across all resources
+* HTTPS resources
+* Remote desktop in the browser with VNC and RDP
+* In-browser SSH terminal with privileged access management (PAM)
+* PIN codes, passcodes, email OTP, geoblocking, allow-lists, and more
 
 <img src="public/clip.gif" alt="Reverse proxy access" width="100%" />
 
@@ -75,14 +90,35 @@ Expose web applications through identity and context-aware tunneled reverse prox
 
 Access private resources like SSH servers, databases, RDP, and entire network ranges through Pangolin clients. Intelligent NAT traversal enables connections even through restrictive firewalls, while DNS aliases provide friendly names and fast connections to resources across all your sites. Add redundancy by routing traffic through multiple connectors in your network.
 
+* Peer-to-peer with intelligent NAT traversal
+* Hosts/IPs and port ranges
+* Network ranges/CIDRs
+* Friendly DNS aliases for network addresses
+* Privileged access management (PAM) with SSH resources
+* Private HTTPS resources only accessible on the private network
+
 <img src="public/screenshots/private-resources.png" alt="Private resources" width="100%" />
 
 ### Give users and roles access to resources
 
-Use Pangolin's built in users or bring your own identity provider and set up role based access control (RBAC). Grant users access to specific resources, not entire networks. Unlike traditional VPNs that expose full network access, Pangolin's zero-trust model ensures users can only reach the applications, services, and routes you explicitly define.
+Use Pangolin's built-in users or bring your own identity provider and set up role-based access control (RBAC). Grant users access to specific resources, not entire networks. Unlike traditional VPNs that expose full network access, Pangolin's zero-trust model ensures users can only reach the applications, services, and routes you explicitly define.
+
+* Bring your existing identity provider (IdP) or use Pangolin identities
+* Sync users and roles from your IdP
+* User- and role-based access control
+* Full network audit and access logs
 
 <img src="public/screenshots/users.png" alt="Users from identity provider with roles" width="100%" />
 
+### Find and launch resources from a personalized home page
+
+Give users a landing page to quickly find and open the resources they can access. Resources are grouped by site or label, searchable, and filterable, with grid or list views. Saved views capture filters, grouping, and layout as personal or organization-wide defaults.
+
+* Single place for admins and non-admins to see accessible resources
+* Create reusable views for common access patterns
+
+<img src="public/screenshots/resource-launcher.png" alt="Resource Launcher" width="100%" />
+
 ## Download Clients
 
 Download the Pangolin client for your platform:
diff --git a/public/screenshots/resource-launcher.png b/public/screenshots/resource-launcher.png
new file mode 100644
index 0000000000000000000000000000000000000000..93b803ee66d236eba80036a4120024b1cd2fe767
GIT binary patch
literal 568945
zcmeFZbyQSc`!_y>fS`hkw19|8cc-EtjdTe^4M@k(9U=+>($dn>CEXy>AX3uZokP!W
zkN5qA&wYQ_Z++K#-#^~9o>>Q&IdjfFdtdvi&*$2kcQ53hU&kfGg+L(Jr6ivzK_G<S
zEp8|d7WiYu!9fE447#dl*emHfQQO#A8=G3dsO?>BVAL>YQ)39kdCXF=|7Hs{&V@-}
zh_@bL8~eMeb*#G$bk4z5^$C)YWCiad7wFC!HPKt`XcZ+fai-!Is?Wc_2)IrX;P85-
z|G^DA7k<;X4kj{^dxo4M@7(cK>o(=>oeiM3Terl+vBRKWb#7+E1r%**9?DeO<YnGg
z4s-Wvp0e@(>1*}FXZ~K(Xfl%B9MLPct)KeMN0GVoBV>yaP2FLyDAiy8I2}6lW0cdf
zy+K4j`F*ZG?AE!=wIMjcjbn74dLudJic>WR1nsry)2A<_o<9A@_`s+VJi;1eS{_rh
zLX|Vb8EDi9Y};QXZluzLX!+Bq;FO8w-gp>u>HF}yRA5lrjF!z#o54_1tEM`(`V)e4
zv^gqj`9Kz>IYhWv5D9+B+0NF~{MKD+E(Y1sYGX9HiXMB8d&clwgOxk?UbEwTf*MD&
zKa!$94k>iQJa#2s*1TN4q^L8SGI;!$HVO8|^tLsDg7p~Ivd0`9V+X@7|8AueF|Fr9
z_1rG`a%vZP-}|`O10mZ;4JOB;A5D2iW?z-Rva1fzL)%^R?55`ORL$}n6fT=3b)lL|
z0zEfri{CzwBuM%6hJ&H#W|r!sR<XFF+aj0xBdlRE_tZ(>Q{a6T^V>LWLe4l<sOj4^
z%LLMTZxOehkX#X~d0e{1H{BL8AcW@I*BCW*q)y)0{b=>DoJbJ;wA?3Xy*zUREk>~M
zd&Ir?62>d0xc=xno)XiM7+6+5N!*1M!y@uj-q#$Ws?l!T@F}K&6`s`!PK=H>m}p&G
zKpv^ty|r2D?f`n|Y6|pCLrzw}(Attk-^khk#^P*g0~8Sg5fXK_(Kj@Q*;5<9OiZnW
zX|`(`XsAt%glW{d<=EtGp2A+4O1j#?lwIXj3|-9)`Hg5qMR0|j1waFqFnfJ!XG;q!
zxPY@T&98O^z<bnbRvPMGm)M&N(`d-Opnhs?2cza<;bLK97I!vv<e(A3r53U?G8RyJ
zCh=zz;FB=TD|>qz0ajKgCnpvsP8MrB6IOP9etuRq4pt5hW^e^F+{MaX-<jD8ejnAu
zA8kB?!42(9ZR}00t*B9L>Kj-)*bCFpfbXgQ(LYNYIk|r}Zw3ET3P2vL&iXd2>?~}o
zmX@sleh1uM+z~YLXNUgw4!8<1TUI3)+}gp;5GL*jv$DVc?@bsP{_}nt2Rn;j!!a^s
zg;~HX!KHBURQBH<`CLlw#Xs*riNM6v(&pD)K-j-sX>V%$FJb-GH`F)3hV$<o0k{9N
z-QTYM$Jl>e46c%s6L@BA=z!{;)H7ik)bj<5tPM?#1b)4R!Hl@{IXI1&4Y|2^nYq|G
zIGOd0*!Y+^xD1Rr*g1H)xi}5}ttlxhxV^rWAq>?NXq?3qv}4S}#?Q@Z2xEqE@E9<2
z8E_ag^K)@?GsF1wdG*=&^!fQY`Twm61v^uqmHHO{-YZm7MxZH9K3+p^Lmn8jF`pq1
zGZ!BhjG2$mz>t}nhm%*|0LI70#`i~Wj0^=NtnDoI!E~Bh>YKn=ZLCawJp(0hfhRAd
zglRZf*#33qg@wMoF}OjPMo!<5T0!|=->8^c!j$dxQQ~Ch<>Tb$;^yV%=HcPz<l+3+
zMQSiRI8a4YqwH)foP58&LCuQ*7!8oDK1xwR1HaCL!3aFHgX!B_+o@PvTL{yj`b3So
z^PgYK0edpix7UBBZw~{FvT^VTu<;78@u{%$3UF`;aB?!UaS5>f+x6B)rp7M+e^;Zd
zhg#^5IhQnrgXg>aI`xN1DZ_04`1Hp|3)5e=L{0t6Dg^Wm{}=*X-w|f?tDm5)KfW@2
zrEg^d1McHbef`II)4$OL0~n_PCrXLfjJP<Nxp)nLI`Q-IG4pe>adR0N!Z-~0xPEUP
zZf$Juq;Cg%Vglp{WCir|m#nDi{+KEH-!FH11w%~(kQg%?FY~`7#{H+nSpOU`E6Qv9
zW5`0Re-Vn%uM7Uo&4By<I0xJp@P@4abccTm4dr<LFTVbqjQ@*I08Rh*A^$7+{#RW8
z71#et0{^Rv|Epd971#et0{^Rv|Epd9$HayEFF*ye0%?#FfJ>cZT6zF#VHwCge+EGZ
z?=Z*$t1`gft2UCFa0rCx0qO@$N{My{oW!=5k`u>X!^XKoL^B<@e;Wd!hDbeoqT)QZ
zG3oIhwyHyQyv>iu-^$l!y%4zI5w`4e#wxmQ*jSWw?HzUP>#x)}Pa0E)%tmf$z5en{
zV+=?9l_r6bMu+CE`eX8ZgG(P;BlbYWuYp&-Hj}9Fu;cLT{w!|e6c)Zvn>=*29`fKf
zL4Mv6)EN-o9vB)LNDfs=+80`$fG6*}^;Ydql&lH1_NTS2fqwqw<)oU8`InOrhz;T@
z<ZsS<dr(6N{^s%{AIRgsIsFqG9fJ1P^LkV`|84xgV);)A{8wB4YefI46X5gz3%=#M
z3MxYU$7{;8$Cz`|Q7}>dQN9`@coQsfADjWdgC%0qB^3#!!mA4+24m%OWwQokA4Y)R
z?<LaSx6N;CY#4Eo!8l^+SZt7<JPd#1Lao&cM`S9-<qAi7CSLO9tF6n`dGg{ENtSA6
zj#^|6tWNA!?m8!IZt7$C>Az_KzkTK~5W#aR{f1>6|ItnGamV<JR{p`+#lhMBD&mYj
za4+e7T0yRbm6b6Z&KMsbPa4|x5Sy<E^H&`F{q~(Vk+9f|j0`3wru6CUhNWT$9hjTj
zqqKfHaLn)Wfg_@WR#g=ykeFGpK6q$FsHR9rA4mhF0Q=R~A+ro{Oj>14TA5fC>{mbW
z0}mYi`Llg&Oe-gc!?e+d=5Iod_sHP-VM%Rm0(dl`xNV!^w|U$0@^TJ}8=NH9N=i%N
z>fe5>+W%NT{ITiCDJq(*mg~?qzgFD~8dXzQ2iM5b*iipn6q*SkA|{5fd{61_>zlSk
z4iBsG@bHvWRmJwdvRC-_)2d=%8&O(Rv=cX9>v`ciJTfB3V59JtSjjg-7A#RcX$1~}
zM0u@zHE@sxbBHT4far-|TV24Bs0M@zj?vN44jaC1aM%l|eyY$jHKl(ZLeViXF=2TI
zCT@6mxTLr^Y}ff*VA>>(*RvDoMQ2G^36nBm>&BU^A|dZmaZ-<o&Pa9+gDQ8Az1HM$
ztdT%s?b2D9Rz8>$BhcQY6{7rNe0*F}Q?p}iEKUk*>nfV}@3RQOeo-^o+uSThL_`FH
zMhHUxRBDsnhv48~3kwUNjP&j6D~L0G*MpV24FP!t1;!2z+<r|ns=7Me=w0zWV0^~m
zb9X8A6L+1%JB)<z+-0{YGKT(`qQ%8U!6{<(LfxLFrA#U8qp1IMbKV$0b(X)UJk`|D
zcySHX9Re&ZEEY}=*Ttr{K22IJAMeg<zI-_`03A_PQ!7{mU+^{`9WiuCjBPrCLo5GC
znDoq9sPomAGiB9*@uLc@d<p@3Iv_`R#YnfK{KCTJy~VEPdp;ib|5KG_Ab$+&m22J9
zT?BqW%e8<O3u|i=AZ8&-6QHv>46PWD86Wj%7?@Eoi{N=nOG`kj1~whHozL~y+J|!0
zub@rY9Pi8u9ejUEA84R}1gA<%O2StUj$YKsXGO@HY$f?$*2V2QM<yn20_&bAFYJG{
z&>nUlCD5eH>H_%ckBpZ!jy*k)35UO=Oj{{xxlsX>u5>{`K^2?h6BFI1r>;D_yqvMJ
zgm_@0(v3@FJsXl+TU&t%j~^9+;r_^w0lI~6<N>sg(sd<e+^n>^Ixbhe(3p#CbCtD=
z0}h|G7nqEM*?ua_&sp2pxK>&xT+7T?2c*5ypQfp+TfZszGeah3i-ZzqNB$-R=XZUv
z31wnoSvpu%rVq4JK$e-0*lmuLjW_c^Al?-PppBi`7Jm2R9n{eF=7NYz>gz8b56y!a
z=C_@D7C5&^-7stOu`7nv#N6DxuQ*tOb8_pYK;o8%OTM5Wn1b<Gc?4E&Utb?;>Q^0W
zDkkt9SafSYu8$PDz4ERR1IhJouSQ{;^W$9#VOM*F>9sYpf|pg{yUux!K^hwa92<q8
zBU4vbm)mKfZe1LBs3-w9pUa-njk^M0vbH;;7_00SJCo{5EYim}VOCaKI<}L*SV(VR
zXXmUYT^hE9EdDGubUQ78HYCO9x^`e-)Xx9K5pJYOq=iL1QZTl)wH>Y~EsY2wW;Hf9
zm+^r>^pb%mS^oO&_Nu)=Y5n2hVeP>WnOJ%7WOJ*Eaejw26`*=~)^2Ws#H_mAdTc-8
z78T>bwaX|HZs(8<Iwa28e3-S_K0I=*OW?CLQ203ubj}}-n1d`>h^<jj;xDogG3ALz
zHG6t-nP&~ml$hn^3knFN^0|DXKoqb=O*c546P#=};&4&dF)1ABisdx<VZj64Ka;GP
zlr9`mNb7f3?>n;>=+G+yZtpw}(PG5Wak9T`jVFoeoJ&?Wb>7E_@!JGI8YhQdaoL?7
ztP0P1#jxmfE_TJ-!G=J#Qh*0hQRUXotr*|57f1vl1w;X-R&ExcJ{zN@^j&ttPP=oh
z<Mp8juKTgc(4X*$8dc5cRr@6+Lh*0&yGdvI0*Sp_0VPbOz}Y7zCIahm*7L5A`|Ggz
zJWlO_`!e3dBW6K44_wei>_*^NorRL}N5_A;3gEA|&&;)Tb$eF_vP?E};+Fi0drd4Y
zEr&;5ag|h7Mgmjyi9ZAO=2(;X%a2jq2q3)?psBHvMd#Q;Kuk=`Nf}yNSGVbdHbwLo
zFX}Y9JKu&19-3#({&<=?I;x;>%=fswq5|<6;wX?vC?1xdpMQ1~2Xrq|IZM803<OE&
z#o9i2L}|TzR$^=GQ~IuN7=j4cXgi4Os@xqwXhUX(hMX6kqQT#+EWrRdVr5@L(5-|1
z;zes-+1j!{l27<p#;Q{t32cQC_)?0;K$$^s0QXA)&kjOk1d!s{mR5934B|ENdO%C<
zPBR{9utaISZeh&H$(7q)Piur@QYAq^4F{3L*wFBPoh~a#U^=XDW}JnH&~a*E8Ml6)
zeaOUJa6y(r14U&q@H0_Scl^;H-WV1z*n`~M+|nZ;Y~xvLL=bRM<ITt<ugeq7BAxK=
zKE%LgZ~Tt>isLe;=yY;f+q^C6JK%yfr?Zu_z<hkxXw?2o_@7~MSxE^{BCPQmt^>mX
z(@h5o_Y>GGFDpNQvC&E?Mxrj*iZ4b0o8gBW57(1k@+Qigc;MmT#m2A4t*Eo}j`TD)
zH|Gf_%3I^13Bi|SUF(tz(5&PBD%4NY+a@Thu6N!|O@%-jJr;(!&*$b0fO+{)!D}X`
zZeQ|}1>0SopJ*OK6$wEIldcgq@r71I!%^=+mgo2s(w8in-2aM8aH%_%)3jnd@JcQH
zU){WK+Vjxfa&>j}(z3D)I^evhM#siF*VfkVjvQkT0f7J`ji3cl9*?#5!>+T?`1Cd_
zZl2q15Ry(WV*Dn7_;j6T{Z)pnJ{gpbc7q!Tah;Xpq#+Z`lM-Q6F6m)Zd^(G>RwW_~
za2Py1*fh4RIx*&rY7*7MK1<b;HMOW*L5GJ9!fqb-r2^CCm4?=?{x;1MqNf+0C}-ud
z*m*}BOz_$FC`NTu5=Ogv=n4|Y(TNG64~D`ndkab1_m=w_K7!fMbko;=ay+g5-Kqkl
zO{j!|wxhRKzBk#6-J~xmagz9vLQ=O3YhAiVBRQDqN^{2?fn-nHxFJPOQRmF|3JQ8V
zM^l!FoK71R7*~FYa@1&cc(4>Fae#QzIMW`ldBpjmR+P-R>bFBHh+bH_tP-r^`ft6q
z`EXaj{#CgL2vG0a4FBl1vrsQ8W`U4Bs)eM+f>44h`Vb$0)7~OoK6e-0JW9Cg5j3`0
z)!jD&<{*D{X~`HBe{MgL?_O)Dt4l-~7tv1jpRUk`cTnohz(S{d;xe{)d9LwP&Cl+B
ztMFAicn?F+ra*vp$F9|$WMTVlJeWx3%LQ`$2hh^*-C^>vIr8NX9Uk(ABLfY134Z5Q
zW~j|TbO55vyO;}NH5N!@0LDC#C6U(81SuL=HL|qae4M`vumz>(@hoAh6+;&Yd@Rs<
zpcSa3_egeOe9)p?i7@s`Ey!v>6zuNV#9}-;y8!vz@g;UG3z~PMj;awa=FXmDB5{C&
z+Vc+g9Evp+`WylAPQu`H*+ezXjOmX{$1m+1J>#Ae2i2O0xVWcu$LccXm$WaX_c|W#
zRiXVR=^Jq%x_}gfwgZT(K&K}2mk!6vXMqR~lwQgaW9CiEtPklla0dgc_TjX^Gr3%z
zESsDOBswlF6U)vCrVp8A<vc9?&;axVg(v`)p$q&nzL}SwPfxfL2XwhMVvDd-ov@>_
zV1MJ3D+XJY#WMON1r7xJvHOmApet{GVa~ejI*oXyDR(D@`J(^<RS}!dy%k$u_NWRU
zcoh$~Lkl1D6)2SQ$Y-hwyCrL#{5A-03_bnXMVsKmLx(G9kQqx5v_b0G4Kibp$}cTd
zo0e(OckMO4FV4vUK+VD$pOfN7DM-*kTnCY<)_h6d!^4B<pbn^dR8$lOdqGP8e&4q!
zS`gb4EP<amIFq4Fb<${Pi0oJxW5V2-YYpOe+L{RVxS$Ym*B}tuiThKhcGL)~gm((t
zt!AJuX^KRx8y{)J->B|w7$>gJb39*;(=>}(jZ_V!p(hg$l!#50?IesHba<GpOe|HX
zy4de8Fm2DpU-KeMmQhvJm`hILaEsla{<o1rwu=AAS$fA<>kgE1a+E-<nu-LuB+&Au
zi7Ev6f%DrfNS<E!clY#Upr+!6+7AguLXcm?#>dMvG<>-KJY-=oTUk?ABmvwvYvVj!
z81yJYDujYRoEAu`%5hU`t-3zT5U8@t@oazzq6OtJ%FB7i8$hfrv2gyh^@Fpzv^0?x
zWUEr)CnqPPq9Y?CCTKp8LRtucvw6_g2G&JS^JRFX_z#94u0Wce63H66A7&dzWnCOS
zB|j&V7jm^#lO~z$3<}!cSw+dm4vH)B1`djc(TFPzW_Jn<l(c`L3s*6{Bi?(^>3-H>
z+-pxhN^wW??hvV}!y0W__J7DE1@wW5nfZYfz+Qi<aIHQ7@S#F`l1a{U<|uC`pXHGZ
zRS*OzCBMh1EWiX<eoY?afoiI%z(0bI;YMsE05VMuuqO(+fJ_@+x=qDee>`UaE#ys>
zH|c%q5EBWzFRs|#j0AUXTvn34t*Wmtc+q&5I||~QX7%QB=+Nr>R6g3^W=XsIeSQJ;
z1?Q}=r#%9AiRlA*Kj?xY#lu{+jFm=6<pbYmcBo^kUS0$_R0kU;iHJxk62)dpD@JCA
z4~oZ{#>$ebcIL<{a)q0QbyRk~gokf?eonNGW!<Y`<=N{X?m9m_r46Q$N^BQFEp+?W
zYs=rNLU5e&MgT54q><clsk?>W?P%jJ;yPB1c^6P@?Ncml<BdAq?dVN_adlnmwvr6x
z6Zn3q&dG9e-^o7fL=2pZ;)aR&rBy|IPfw2<PxK!cMe__`vC>V)nkcJ^<&^66X{2kc
ztORNBw^DxRg|O%0v;gIRSb{j9M7x1<QtJ%Ro2TkT9ZG^OsnhKvcNzBE4Z?0GGPIG2
zhm^;~%0%ftGCk1FemG7a#NnW0ERdr#)HCQ1#t`v7mqS%2Lp@STC;fA2JcskX$9lTr
z1J$r}mT)t~N440&c_XFwr9bKRF-(^CeumLBoJ`1jt~b*SRLk4m$0_3R_?I}qyGD^U
zkiTzkZd#)Jg2Un2MeVY1sIh)ZLzWjCNiRC`hSJaJ#0i1=$<0YyDq&YzfIdgzAjLHS
z`QWVkA|rCK9`AXLL$KHS7*dxH;64jCkeq94YnM6}jv(|lBXkRs`&V4Ujm*s%LDB>u
zSW-_I<nfF=02_sC5^r?Z1WcpEL(0Mnp)C6g{c2McDvPho<66}cPt+0}@2?ug$!F5%
z(!kQBh3{rbC#EJnq*vy39JmN9kyTX9?n*BRuTDy*>zv$Z$dOf~T?}UDQrg18Fn01%
zRLNF)2n(zJtQ_SqM!Nj2l>^!17MP&9vJe3!T^##dzdI%NJB#mqF<@3^Jf7As`2>J<
zxwcTMF2hja`mAl^o#`j|7jE|pbagt0av3YGps_F=>>omr*H3=LB=szIsc*%vSN)QK
zR|7LMbH>Q}q|$P3>84dhjKtF~gPx{bajTAQ0DF~IRgyw}f_(MMm&md*Zh!Qn9s27N
znUyD^4nOE4+KA&%zO{&pRQ_x?#B-4E8{r=;7?4a<aaiM^x5~VtrkcZ%z0Pr1DIGot
zi%kd98CY15GnlQU#w&&l<Y?_luTPa+OV3+RpOQmo%AJfDp%0G)oRsNcEKv=+kLuc&
zPFqSHhSHyM)%j|dhwun@2Y8$!4d(9=`X_J28*h+Op!7jCQNTf9xi@iqprWLN{3F6@
z-|UHZsPK_<T#qBmOXuDC$`I|5V+03eXP8X4&eefPRwFvtzD5{-L}cC34RAnGs&bql
zi#%K#LZMh5b##c2`Yi~~hT_Dri6-s#YRpMy%clFjUDTtP+**?=$%-LKZn7+v2-z+b
z@u*b!PJwK@`>zU_A_VA5$iG+cdK9|$AXwK=j~o+K#CP`~>+!a}tyb00wLz)QlHRA2
z0-`pVlA65xf~-U*&0}2Ss?7g6IO1Rl{_!OFER+MdJ4t`OjRHz+B(=GPXU3JY`Dl*3
z>o%gVAyd`g8XPtok^yPP$;%r<o4wA!$jFK<;aF2g$P3r{$t$jig4O2c_dBdUEQj3>
zP$q-{{sg4<A3=!qM>huAT@&;+9<M94U97ZygoSrsCu{7aHz1IL72DJ(QmvB~mgx{B
zq54Sthh(wIy*)eJ8FJ0a+Fl>=#B^Jkw%h>hXz?%sha6g&;DrFH0_DtDg`o~Ft$5={
z|EaV!g><?%(6V!+fznp?0HAgR;15<yUS3}9dJEF3+STEKdSSuBYyg#f;fP!bIXYkL
zd%KgpC=B5vFn1LN7l?tBrvb*}jEp13DX)Vi;6&HjF9BECb#%lwuu40y$_2i$J6P!-
zO#pnL)dP^s7Jrh}61U4!UeLb5yI+jxSzK4JR}RG*rBor6%NZP%R~$4Y#O9PJl#G>7
zG>J<er`yBtBg|e`dov&aoyb!XN2mVH2Z0X=`G)B}U~D4h_*lP?8@>@UD(M%#_e<Td
z{PY1aG)Y&OI<gM)^z<CA_q;f@s2RU==~U=Y11~*80AO4SX#`R3z_kwh;lgca4*=$1
zVTAN{nIoNE7dE^N2bYc_d<_x1r_!0@@vB^&2TKB`WpUY7v?9~HLJo-%inX)J6-QyJ
zATygx9;9DOm#uQ^<p6*C=}MK$e{68=dEhJThf-QCyb#P@PuH*hJ;b7zh^hUg=ZG&<
zgF6lJYHDh_r6L<;wY5Uyx;i>N&O-9xfKisu%6*K`$QqE--1_Dk+%^v=$0^$_P&I7E
zD4=un+ZCxC>{h6+hzd>2<(&SQULau_HP01zT0SDXE-+9n@_l58DQIxOs6NX5EL-Zb
ze^jEACN|FQKc%_l!)Zd<+brfa><K%b^n1ldvH;Y)ZwwFbB7uLuD1PxqXG!;uA3yRu
z%qu4*5_TH==7y^(9YUg`qm5_1AtKjjo?Jrc!UsD7@Ok&9g_V}K?~coh3esl^#zv>T
z@3j5a$`_F;txBAoGntH$bP-chz`;wJr7f$R4)6izv~6`aBGGcXa*M`)6_6#rz4Vd+
z@=p+Ua~#$MwCzwXIwWF}pi#Sppf5=nq||9_g+;(Mrv8+Z1Ka`WHLQvWC^`hcw{&U}
zZVeKC0D=kK&?$VdwUw{VG^vhsjIi?Vr<ts~pY`j9aOFl080SdDnkr^7gcAnSIs^{#
z>MD2Zy1h_7=u|NsRPBt6B@)+y?bZ7;Aa}wR_SL&;`SLjPdqn@ei;amwhl9#e;i2ve
z4RMx_Iyn1;A{5-`k{JnVgD6BjX|~;_M}FmywsR^#U;~?5Z&U%a2dVthTq~Z-R@L%e
zE9+&}%X)XkeiYq2kfpF~iihm7JX~>fTRp5Ub@e#uf~tMg20);@d}MgocpM~RFipDe
zXo}I|fY@|&bTo!L?7Izv>>RLj1(M#7$Ic%TSEEj5pLYsX33WOSwG;DdkCH`=<^)-A
z3y{jLz0WaHx+B#|tD2czI>E4)ACRSKF+?B80Sm9L)lSQ^szr2JvGA^Irj1R0Uf(DX
z4;mDYGKwpCm99Br8l?&_hWmm2ePo+gtdYU#Z)$zyyq2A{w;PI-71;|5ov=mrc;552
zL7sic7FGPmT7V_%%VGERip%^2LBy20aOU_XIF`P?i*VWNu$B%NLQKT$FMC~PootvO
zU*1H6Ouhai8SfoqWNb!m838t>ZYq|x<K68?`{(<8CLCe6!f65Ta^dMUJoWSEM@uIG
zIIex8y#O3oH~>(9E~JtAv5f%1nu9X*&Q;2TGM`(Ge(O6gV@<<F>&LpwHfiGL1=i<{
z3||_3;Lx6zDqk0f$dM0Bmkn#l=kQu~4#THnaZEc|V;Csup6u~1IQkN(&9g=;6`MNc
z)_ows;1Fwu@GFof>ZF-=5;#c<g4I{@_Z)wdS*zh#qG=sxl1@CmOZsw`0V6viy<mD2
zUhls@x%$#+UC7C8!rIwt`s-Pp@}W!C(k^wc@V~2;bzht4C8rAzsV?`i^>#58F$4!u
zjHpKxpEu&4OUfq+okZ(;ZB4kr!OwmL^2ljPIr((tWG|*6{WAn&-MBlCziA4sV}R_)
zWBEM+UJ+!dc~-<MwV&BKl6D#Z38(4(Qj_P0S=pTxZ_~0d`YwqaGr-R$fNua@+qbj_
z{A3^|J|CL*4#ds0rW1LT{AiToQ3ScZGi#e|Fm&s4guLd$><P^_lw}VgF9-julTlDg
zZl_LBYhJ@GmM0sYBOANmfd{K!RtaN-X2Ts+rpt<oQ!7cW)HYV#@@=QIknyu#4r`P2
zpQqRO0wZBAZ3t=Ax_tL0?UwPt)Q>}ZJ;Pt<0)>}dbC+EfKLQwK*f=qMJ+a0mzmR8Z
zgiKv$#O>Rm#1tZGI|9U>gS*uV)}l_Ts@A96yoKv>4PLs6EraO4<!wj($_m0!)2I1f
zXPLVDv3>3mvoj)xb<<}aCn4L%NlptdQCy6|<$`E0)p^tQqUd>mS79XtQaIlpmR7nM
zb!XPA5cY=>YEEK8w$>2KCgbGf<RF>XKAwIu1Q?z=;e?*iE;R3b@MIu5>KY+u{*~PJ
z;7_&M@Vd2hRON4>*fW;O6L3+&+F8m|w=SI;=pss_m1Otv<)cm-Sb0h~;?k?Nt<|Fe
z%rxa9v!?%Up(LlQkgK8^mHP9#MsCh2b8y<E)%MjD#y}cSSLBE_;)t!ySU2Y)1CWz-
zT2wr&!zg^!J}xI`YKNOxoIQ7-=Lq=H#P#6XOJnbsAZrCj>8Pw`bg2h#;l*%rPR`Le
ztu@ovtzr0-dqccvMaW{*wx+5oD5GvH8{^E7XAk8cR+$P>HY`@TEei3F1xLd8$=mD&
zdR}q4_MDjU#JhbHj+LFV$C=6RYnKCkGBH{9xsVlc+|c+{WUvNt<@{vd`Xm9cv+Z+p
zbApcbXNqb4?WKL5`U=yb=k1{jrO6i)HA`g6%gg&0)5wdHiDi)(lVp#h`r0=No_o;6
z)vV;CGGtG~NyW)%^2KNc_jahr>58C8uTxIF=<aRNFt0s@%Ph^aF6gCQ{d!IP_}qa*
zf{2Ifkxag}POUTh`uaL9<~EH<Z-P|e$oK$a0^V1*CUDrp2iS)sB&VUJB{Sgdt2Zk{
zJrB|}q0lZW<Sx=stkU{&@}R2Eg9o79((OvoLuJvZ>9acIdcE6a!{&HBa|80MA(>IV
zpb~6Z`QtUia(3M2^^gjA+y-?(nuzSj3hj6QGG^cz-HnEk-JE^3j0MOjFQ;7z3rowz
zwV~YY(*~cafoa3@0|n%~`{_XP(ab~^5pm3(pXhPgNh7w1bK6Cq$eF+UES^_Hq30p0
zW@CrtmrpANAT=n_EQdXxig=Xd>_zEy{%&0N?C$igFu&)yisxB{7w7uAIl?k{Y55Ek
zpNs%Xjd~hz0~8U<URK-R1Js8B;3FoVVSl}?;4bHR-X_XpzP(|w9OJpVOo-);Q3$v;
z{S;C2U(O_03)BGyR)xN6V)7oIu}(jYk7q4Z#5aJ<q=nWaLN5H8s9EdmcP&K~fSl{+
z>j6^EE1*o+eo%o0nG!Im=zXv=1G0MjN*XDTd6PJDa$c@LqnAS`Gj_4b&UsM{Ue(e$
z3;=)5i%24K*BBgh(tE8c^<!zW!=Dp}hf>hPO>5dS5-0II@kl+K3YLRsDh9Ip7Rc*o
z$?ZV>OZMSBxsSbDXg(AsQeNR?=dfs&<hE6nAnGOJm;WS?hSwJ|eXIe>n7s-75n0Ke
z0-)&jkk@xPu18I+5ZVVt_CS~MkSBQ7r(|6v-5|+~!}nMrA6Rz)g+>lQn8(x~WVm1M
zC-(vF^a%4ty;h<Xi%PQlUPmqR0vc0Ypd1|xM9Q9wJclj;buV;D(tdgbfWiJsTIkYl
z8&%)^(1aea4h<y#ALLC~66FQK$^cLR0a62LG$4yy3v}zk0SOE81DPtDSyWI@0+sJ-
zLwU!Ra!QYbexcp3^MFVy<p-99s#I_GqSg-dzXEKFiHV6I0MnY9Rnd6Fy4}C}x*G)T
zYz-n-R#ojRskKGcx#o);q~I@lY`Z}L;|Nv*yyEHwwv@cc2tDbH$JMS?-UJ-ayI;fc
z_xC5i=dXGRg0=u^M7_NpoOx_g0K4p^;Cs+P5e`s6Jb8-HM=nRBCi}obw&eV8u`n|)
z#y70S!;dyvN)c6_9^A>Ni3-9+$!*9z=;ijwPJn1F0-jp151cMyU)}3a-Fh{l;c`8>
z8(U<@=NB^qashnd7Y@u_9H4Bk>Q!vpaOMv^hVB)IdRQDKT(&~b+uRS*sOq*0<`+65
z+?H0evqbjFdlBvTLl;6XSMaBIZ7+koc5_d_m8}&XNq~Rcu9|A2@|s9JxGvP?b(-a6
z*9Lv;c~qL*h44Zm7;n`Eo!59Fv{3{d;^1Pf@Y2k4mUwE)1k`W?fZ=*oXIXQREdoNY
zdu)1Ncsdb!RtAmtm;xF3(s=!*^%<*~E%dx*6;!j`zU?0jC`_xPc{iNZB=-i09PA;Y
zpeIq#4p!tIa?SW3HAC;3g|cR($nHCZ1<vG?QqALO#?Z5`k1kJYQn3opYl3(U!2>}7
z?WEg8B*N>c&+|kFK_y%V`~#roTx_<KgMwsEimA@5_kS8zATOFZ`_82<7Zfhp)C*o#
z&zocW<+~r|LOawOPNU9usgO@X?z+(_h+b@>5()$b!Ux}-4GvE{|7PvJSC5OT{#baf
z1b8xKDI|~X^S&-r8F2uf@S}p)X~n)j>$#Uzj@##f)vXhEvkJjL^hS@8huXEUU~ZwJ
zc?+KS6Yzj-<>(soG*Ho=KJS5gJuST0+P=gF++cT7{q%7#G}%A7jua@lUlUuMu9I4W
z(>S7lH+N(`gU*qY0hHMQryndV4puSv)P#y0W+V4Q&cNCFU2@U$@?N9@a<y*>+iM4V
zt8yD8If>^JeHVS$nM451#cu)50Hk&x!BZlHxz_1|Wj^?l&fZrcudyd`#RH<mm4-U7
zW8zP!D9snPDdN*LAE>So21|5mi?!v9@b$%0D(Fn|6li<FT;c3-wBjCy(|0|y#y+o4
z8U}TT@2}AwevwT3yk8MQi`<sJA5)&|^d$)_+R4eO-S!Aw4DdP**jtED0H3+Yf_Yye
z!D^jYc~HBGEp$I&JV_Hh_j6xUZipx=D;v2!Jf2v?;jl)*Z%6Be5JXyCwk2P#j<O~>
zJw56~CfDtUgr*)Ncifx`7k;=|W8!dQicx={mU9jGUc+U&m!aWJ<?C&5ord}oA=(qy
zh=+l`l8?L(XkNb%yCo)B=u~lbHeb2O<91a_@<aQwOI_;5##Z-6Hz4GvHcBO>q*{+G
z#|hwqnUbqI`fVf>FNr~+?Tw$Guyay?SjuB9EwcJcS2WMFP2TjZEK%M<rY=w#L}%76
ze_UZT`AH?G(UvJSEiEiI_FZLVrP#b42^K|LQ)}y$I@iNz5f7~!$H(yizIl<Y@`8>~
zPxC0-IqYWF&~ettddk4+ry;YHk#*Z;d8TL<9p9D!Bv-t;Aw_+C{j169J7eXR*rKA)
z&qHRPRTyk2utVl)S4lG*UF#^pp_NbM;^N|b&PTf3m)!Q|I=Riosl%%>tx;RD7}7UQ
z@z&+f0&d*ZGdIUeS`G^j_wDYMooMia=GBBtLo}oPbqk-TN$9Wi-@gTj#2FV#QqtI;
z^&Wyiv6+^pKT^HX*Mq_QqnWi+-4IqYeDXrWpp0rTl%vY$eq7{yLui}A77iC*W=ZVN
z(^SUsg(S)cxFNRchS3|F$EL>0%yk7#p^AeAI^@^MUenOg;i%@QG+|T8wt~>0+f_2d
zcjM`sYhmY=B)63CQ&J9Z-t~wkli{CPThq#%zngjtNRqnmg`uxs5Be!(GwptSL;Y4g
zrYD}a>mjb=_SA*{74I~O;Bf!RdJpXqA;WLiq`VBRtwZURGxfj<0~K~mo%qf$AQ9;W
zF9@5}1m7*lEzBnbe|tRRSNwR+%D^D~5Me%18D>F_4(4eGfe2`55CtiI0EjjQ$2&LQ
z1_h-x-_zx<cG_l)KngqC;0rogHBHtyNfW9oDbYA?{Co>vmQMkL+u7Z{GoqS(>+RO$
znL$t7w(beX?#|A$z9fv9^>y{UP0}|$H8t20?@59N2ML)pIjHFA=?5!ue5rAK>A*@d
zp1B6NovzL-ahvVV&JICL&^pJ;&th_4U*8A%#4HJ{QRjt4dv23gyfbet<mEB#PD^K$
zh}{iP$_A6YS!_Lhsnph=GZcSk>torNd-2xB=4PwF12pO<wNoD;AE<FiB|=|#2cth_
zq`$e9=U0Xc!M9O>xx%ip?hrJ3`|J#kv`Oz{_|ZKlAo24q`miZ$O^q4dI{y+aMoE))
z39M+K5TiIOQX$D}FWbO8)<PfQAX!-R&nj3bd77`*)YOCqmTi1rKTL&uKUk8W`;eJ!
z5ey^6LC0rRz*pHrhy(T6?cv4SUFf*I;vn?eU}1QC94H8vcTJ5Ts6f(X-Nr;aIy%D1
zx&2x?ieYxCC%*L-o`^ZsH7+tdK0(2z(NR)?#2eRI8aq0!0@*(`FrW#c6h58cgZN$R
z?d-(u?d^S$JEW&c1R6=znV2Aklf3cK%9rSg<7RU`c!i0L-O|$|N61Rj>XPXde)MgB
zu6R!fKSSxNzZjaJpj+vp-h?P09|@}Icpl4{)zzzDLBPtPt1UTv^{OwmR47c-+1a_V
zt&P0QZ0KvnG)q%Q#G|mVuzRK$nJz`;<!?Y~f(~M&Nn}=5-ClV04l%f$Pk?MJn;NI6
zsK`4iN;PG?l!<YvjSjNFcf+iVEIXUN((^*#*6rItk8+Ioe~yke4GpPAa*%cTe3)BX
z3k(&B^9Mh2{%A8JP<+Ygy4qS@Z8W`LGVX4X4_9$<Y0#*5lUowLbRC>>*{{4{g4QSC
z22x+%XVN~p`%oc?iFCiZs;a4_1!H%2HzTCtc_?K`(H%xL>1a@dgpFfjV!p^Au(xC|
z5pY<e!&9asEGjNeaT7=B;@=*0hPV;P!;Miq!02b8Gdyru8*F-ayN%uLh$0Uxslt8j
z40|<Q&uKPtBmA{arOl1?;e6K==k2LFKYzT2#zvnO0tyP6HzNgiUmtA>8X_+z3oT;#
z1Z!rzkny-7hB9TKa*i?O<wZoqa*n>ci=Q2K6J@iCOtOoXqoe%DY(w**oP60!r_C|d
zjcMdQUTb_p!ZjHgYt56o0u3z@M!$pv6U)!3S0QM6?H`_G5J85sZ`0m1Q^S<K;te*O
z1GW62<hNk7Ms;=0;Y|h&HBK|(8+Q9^N4P|O?wVZi{$^d%?>$$U@RIb6yfSVsUv*}<
zybZx(B4N{O6oY)|!_d^CRyIHO62Zq|YhQmq{$wH<8}m}L))&IY^ka{7!@W@-b}h85
z!sXmqJ>UXglkGj^iQdeo;g-HQAHP7CtFTU?sMF%sON^wB-5ix{-;le4)Ep()dHI$Q
zEWJiT#d35)+$-nj=Pzm;Eu|>mqhAM_DGG&RVvpP$iCOyi9?7#L$i+nn0uSL8(r<<?
zx-YNHyHj3XdajHVQfXCKU8ka=($LV5>>TA{Nm~9hxD2d*b&s`bu}v7QB^#-!s!FjO
z=UJJk;zUPB*VEU(_sx(jh8m~ji)>ebJ_#KmE+0RCiej1s37-uFT=DFQQIkC$<9<xP
zv5XQFSk<eaMfU_8H(n9gM8CLoS`v~=!wD+D$7g5CPY7;-)dfsP+!D@7ZQp|9877Kx
zU`)h30cyG8^76fS7s9RwpPMPRy{-mJ_-U1y-KpyNaL+IM6V9CIGc~nn&8BU^?ONqE
zzQlxtna#}ySHS{+pI@Y0C*5~ud@QDc(gIbzGdHFZ)<$xMK+@m=Q@ejc^*?xZ%qNlT
zv$L}tC)0on3yehi2LurRyj<|Aejga8d|B(F1^(v(e7UzNl0G84_+}v{Q&%dit314@
z<O4Fc#A=e^Wu=Y$t>F@wHYTQu%Y&|G*(&<y$MnXFURSSPJ)RGpE;1bm)u^(gciftI
zZ`gJj-mWU!hj5y5!N>LYB_sRQsn+J^R0~YUf`ToS|9*4hu0QZppR~$ARTBF?O<al>
zG6e{kB#zhmN|dx}X4~O6a%KXuG09twXGhE%V`Ym`ObtkB^3L8~9@2O<Av8Tu`T^@a
zWy-ceBF!+d8#f$gI;mLm5XU!(fdKQKI3zEUY0SB3WiHz<4Hwddu7@T8X{`N@x7a*@
z#9@;>`-1+V;0om;yJY9$hfHp!<uw-^A-w3t6h)jORkkAK5*w9$o6;HmLcOLE=Z92;
zAG3DJxqOQ?DQ-Mmu|0Zs!_}v0k_pQ->4~61WB6hdJ;|{KMz0ysF24{77F`!&0k3lx
z^9d?d0&6SLlZd~T5XhFR+c2px+yPnE%-k9}s9GvgEYHpP0?uK+Pc)QTP!LZm|He{x
z5R;)~7YH37L+}X=?Hg$Ngbuh{np8Mq=ka8<L$Uct-*>aJ3;~JxU0Vw5q~+O}8E=r6
z%ryC(NlHtL85?KPeRI>*yz{8r#^UHRRFn`b<nfb8L+c|S3zyGo0jV4T6;<fLf&Ie5
z0=1|pm8&p*oi1pnsf39T_rajq9ni-?Gj3poA3z2Nt}8X&6AJzGiJHr5f<#wW7vv4y
zU4Gd3HrrFe=~*V!tgOT*Ct5qTx)T!FDoxE|*BKcZQBk3*3lA*DesfBU$z}Qj)9ZW}
zduzHObYa1$h>4N1Z+}cx(|`=B_(MW@H90%)7Gz>_vcJxa7c4)+8Y$56lh0yQgX+ie
zyn_U>WCfG+eo{>Prb6=ib+KWa{^dEHhNkAd2M?}HyO)072n{Se-<f~VZYF{}hcjuG
z9F*}-A#b4)BAxpjoSd!Z3=rVi8~gijDkKS|px=Ls#F_SLpui(?XTG}rvlt^&Az3%)
zc*^t4Qu8NRX#<<zuJ<_8U+%qY1Bd&m<+g53y4mc^Jjo&OEs$I61_o4QHiVCI2*5iT
z7#i+2VJm0r{SOg>8YlHV`=iXD_ZylEBEjS`(=a+&!eb~kBO{(_E*4Rh9GIN`S{Kei
z{QOX&9_^1&CbF>{SEQt*G-{5Xo7sPD==}O_fVK;<J<X_mk{sr+uGZAiK{_>6Z=g|O
z<-z84`Ka(^>@`Xu3N^LiE4>#Md0L0eTaz{Bj>$STJZXw)IQH99&p85AvQ<(I+X{Y`
znUiz#{EB5sK}sic;pH<kryxQ_RBmi-`7}1Jf#6F9Y?x_OEv;W~@UzpWexcj%UEI#7
zY17fv@?QoHei<b0RcLt=OmMSb<<`+mlZVA<$tAGN!1rP)1YM5_oEH`sV<Y8S2c8!*
z1zld8%>_^mM><dM?0mbkbMB?~9AxMOn3UIA#IjWaMM!+9bq6jJ1HGwnl$rRjxHmMe
z<)r&XWXwLH#izV>|1rdb<QfrM-<{{94{(Gqo2c<`Ll#y^ggOmvL<3s#Wzj|kyvJi*
zg}U#2$e0f+<V<fye^GjEL*?28lk>3_`)8{*n(uFXDjr}wx`Qv{4+&{iF8-8a?w0U~
z`spKYY>W`JJr~MQJAR{8hzuSPdQ0OtnavkE=<G*o9MDC9M9K>5HocDUjJd~SUkEj^
zUeKw60@CZ47~(Zd?0Z~aMBF_*n(Qb@qQ&*f%sy+CG0e?Tie+^X%=4;~Mlq<09g+>D
z^uPMF?80`<Z@j{AW=0Pm8ylN0N}BKIc$!w(+RnkjGYg9ixVT4O%kfOL*-*}_p`1H_
z!SR`I3vIBey)v+~zyEyxTk!1K8ZM~g+%PVDS>=2G`DHU;XiyeBILNiIv?P|r*^Yd#
zBmy!vkX!+?X!`aI3zhdVM7@3Yj$Pa9S_?HFpGG7-x;H>LVq!Er)>H2}O;W=?5QKJj
zcW0qLHq`<pMH?HN$2K;1znBhS0b_fkmH$RQ%MUC|T^r61T3IQ*qlT-W2L%rp%+tIL
z7?P(dgYIA3+K9E$B?<ANP^j!jHZ*{T(wnKD9c_&I3A-Js9M989d!9lU9KcovSflr4
zI4oZ+h?G+#@?F!nP^tia_>z*(&97ds^R+AHx>y@NoU_f(&7p&~CTg4tzwREc^y?6n
z+pltH{=7ItC^mS~sY0HNWP16KavJM>drzwJ_weOcek2cUNb})-P+(xHFa5n3R_Hgd
zx*81vw!8eSb-BGZn0<fTYB*05SdefJ)uT&pv8OFFv$OZEj+dFsRAp4amx<m}iHg5G
z+Sz&h>J>?9nnIn@qEd!5cSnhCpJ9J0>xYE%%I_YSPa5CdejXMR6X1FAMsisE8CP4M
zsC5=%<(DgPW?||IM1qN6*}ViP=G90+T4h31>{S^?MxYRDL*}0xHw7x)Pf{!EpNH0`
zp7*W1L;>P#m6g$4QMEjcJ+U_B3M)FTatp?*GP1Ib3ZnTerQn~4JQ~<@yUQNcx4a}0
zfwWCPZ!N8_bv*#fX1<~~s^w2bzB>-~3{@w`qR0aCeS7`8vuBP91HgM<&97aBT=jJp
zP=WA8`-I*JV)10k;fH9|QBtINH<l>C9L`IFAEc!$<72z{_)zaa(!}CInt~r`okus$
ztQg+if~|-3VfYJAb^pL~PQ9{ag!U-ny1u6xg_bj2|3s{~oM59=i?88(F(INUHShQ<
zp@O7BU(oU0?gZtOGf@md9<dQLHtDoBD`sGPy22W%!yo96P6@$(G6T^5&Vm#NpjiFh
zzrVJtZ`EW(`i)>^b@koN`_J`uK0GNZDe(o_+Y7oE8D^@_o+pb-NW9T3PNK#EpxI|A
zCq;Vb@s2O#3Bjk4^<tL+iNSnze3S~OrQO$v_Rq?~7JIrLg#Or&B16FO4O-tmxC>+s
zPZ3*_Hiv7f>6w|)v6vt9Nsf<?sp&qKS9Y^qo1336wp)}wKV7$$R8a6rnWxi8Vu-?>
zn$j(*s330P<lrdwLW;PbZQcSAROpT{uKyA#1gxd@e*O9xXyy~x9Wi$b@EY*c#l90N
zpV|$-eE9+Zudwaj0zCzY8z_WZ70td~FL(vODlvfC?qEG3D7><@wY76}6#ZKK`E$eZ
za?6jRqSAYfJRBV1v@)2xRKCkDph}G16DQRG;nr^!bVf`fqzPk!g7Acdg&%-_Da3z#
zftb$zbhVo27fkruRB(5U4c1B6VW*-(n3}p2!<V$PV*^@Ez$JX_>M8(uicoe#2}59C
z;ZA;BWY-_cC%gsw7?hvfMB?h}-wa;_zG-f2QgAVP3V=eeheYvp0B_jBtm-X@03YAu
zln?b<UTcH9G>cxD34%^o;1(R5&opn?uVJvVQVBWRgp%F;)vZP8p&ah7ZXwBDQz5zP
ztW5x`&bKL`wXosf<~+IyadkU`K*GZ*^%pxcAl~&J*e%lyw-OR{KE0rmX1<%N$tg*5
zAJcnbp-rR4@ru;<uB&BQ%$I_I89J|c0?}ZvbVE>{pS!ohpinA4KEB9y8Fu>>y$(BR
zX$A|6JlOoX`b}jtJx|YiI*3Z{P)4}#EzI3%ZxsHS%ZA_Jq40YXLQ!1<_ijYLhMk0l
z>C+bUc@WblKsx*NSTp)=RbwhS`kUn0;-vzjiqZpu#>cH3FW4YmY<i>;gsZmKFhcYj
zIUrq-iGe##r3V@wjKtfQiJ_m(T@$?0F$zb-Iyeaq&~rv17mW1ZyXAZshAF1()%Bji
z9``_8eXubpZ%|+hM&Frd8sRWbB5mal@e@mdblJ|}o)<IWsWsgb5ux-#Uho<i7ywA>
z95Fw;dIJwHNbCoj<PoS10jS~t(1#C9(}p5oW5WW#LcEZ37tBy9Q6hhbkP!J-Khiq}
zTyIG;_i!%tJGZQW<S|n&o`!=%Noa{UYW%7%1b{5?U%3>g^t%C2b+bL%;5RZh7E5{Y
z)}S%<@;%Iu3E_Lf$ubV0Iba<?QDLs0lyvoH1Cn@QdHHF|3!&T^vCBy52LSZ|6|vo#
zaFLn<7zVIs53c4)l8guMDrBn|EVQFELq*^JO(8BRDe2qL(3scsgt&Roh7jC<<G$T$
zkHz;Qke#t_|5yvKrsfWmkq+<d@@yML5bn;2OH~5hN5{a({{B|!HYH_<<#@TlczOOu
z4wzllH!4a>`765Dh?q2}@ytgGJl@TN!10A?18k{MY5eN7HTF#O!~aNvVJea=ElCim
zUpmcwy~@zITm<5fJ7UtQWXE>?o3sd%3;`>iy1LWx8Mb6|2qiP}q!dJJ1ip7}?ir&p
zi;oXCOrM>dSB9`{wA3y|e<)`tyZ;a5z6I1V5Ls_K&j3NCfWQe|(c7URVXwXk@xvKw
z?}=A$^%@@=i(;Ts&B08SiJ=S!IfqJ~uBCIs8#<~;>5OCRY)H}E1e_8qekS5E8+>c9
zUHF2IfRK>(svsad{CBlJ4o8{ZjT>eL4uuMr0o|7x;)hvOem6kA09Rv=>A)51nmGXm
zuEGeOLYt5*nrU$3<A*p#$yk7tVq;Q*JG}L5Hc-y<UJ#=6I49g0VY5-&FH$Vl<Hs@;
z3ThL0pky!o(&M8~SGEAH`IT2LPmP!$^ESzDr^rYlG`BhX%7o5Tzj*YP^8=eNGoKb+
zxEzdMOo#Z%>wPjnGrt1ac~SJnuxQr4NFDb(orcjX7sb~ao+P?oN7fw(UN`@^)mXxW
zi35D@bGyCU9a_(yKcZ8WE<Gy&1jI5>?CUByDp#d5ZUM>*EXU$=J7Q8&QrbbB>`S^v
zz6Lc>(K`ClCv~p(fDe@r6GK06^~k1`{f1U-3vE$1ul-&Kg@Oeh=)Bfbk(SCoj;}oN
zuB#IU+eY=khMgPVuZR1~NXpA&fdJuBuVG5aO9iqbKw(8+i-X(Q?e5GzWzS#kxE;Ly
zV_;wx<h@d{U=d=|*ccf_+moyTRX)=s(>l;mK>Ic}K7J-~^vu}!q16Q2pzu37Y4vgp
z>>JHZehpG%;(&T%x0!jIr>$O3^BAlJxJJ%%O{c~YAU%8ly7)o>;1D-6W4LweR+0OO
zoyB;0oyIP=#ZQ7#;~v6L7ziR7C0}>S-g<jOz|I(QZnHse5a>wWG^I;L*zPaMxt}Z&
zi+>X|>9vqe5|X;b<9a|cQKMd4Xbi%Ges97k4nBT>pC1OWPdhj~?BmC`z%~p4M=U8T
z%T=?TqnbOjwe^sNRkxPp>}ZpfD<2GoNn@vs)?&F==NOn?Q1^Vu-SG!d*zrPy3!mc#
z2?Q`pO)CRgp_N<P4Xh}-xr7hbssfPYOgh!FFGJpM_*}jHun|yhK%NAcXaIsevDnbD
z_*sNT&SODmOHL-_OaQ29EH5uFK<Y!h!T14cKH3}){rs7Z_Q3<;&8G~P{Ny)p`bb4Q
zOtqS<{{D)~U^*r-F&M<6`P{-(o0C1*t}B#`jK|`w4+eIsZe2CtoPDG-0M2Re>1hS&
za<RoI2L<2G`ha;YGmll|ur??J1Vzak8Q~vnPg8N555ESxqK}7yCMI5juysT9vhoI4
zz3oEp;Rcqd(sluDn_~y1R;`EFXVb`sdJ~nq8S)DGYKFjzt&Ej10*VSn9UXZ9FDqeT
z!6ct75_|=(K1}E(BMTt&*$uwpaG4F_faO;PcgZpeL6M|6@D8IbkkzfW$xlx(-ji|P
z(%087Dl5Cw#sah(b-{4HcCq7TXnSWTgJLaHm%-fEcPk)qeW^1EDi|0b+XqFAurMD0
zr_T>Z6uaYj@qrs{4XFU7dJ?dG6RZvdya07Hpqg$Z3Ay-!ova4E2~_|RxR@^Q0-C44
z($)|{fP}^sju8=6tg6GaWMgHa^~_jV@`->$cnDUV$!)!(ARr-m8_ydg+Mfv&rKAXq
zioM3t#)eJgWZ`yEo_=?DRFpqhpDW6H9k5uyMmxUA`|4Fz2-+>+fF#xjKnMSC{nZZU
zvT+BpEHROhukSs5LlnDJ>$3l%!fL0qMqc+ZK>I=G#TGM-J}c7=$(8PiEuHtIoJam^
zoggb1$dr4UC4aY-J*s%xb7uyP$8zlT1DWW+lT)yui&nJUeZPm-0C|~%AZOhlOIONf
zb6CShO$pff_+T;a!w2uf^%29-l5J2{3c733#6x-ew%_jj^vw~c)gM>D{!`zqtSmm3
z?#|9;fHK%kdMPOQ_hLq!J>1=QIv!Eo2jn-HHGrksJ35}Yy9=SRRD6+-rxWg;heI)+
zHTOrqR+pK3ef<_p4jWl>Sob6pKZShHRyMJH30AH6hKeQy6&11l93KywKRZ5lep%;w
z2kc^O0T2G{_uzk`40PR6Q&R)$Ho=P9)~YB-j~~-}1(Dc*CO_<!A3v0?4ZPy|$foZ*
z8cGvyIQUtS1lUh)U0tioG0+@fT}_u44Kulg^<s8*9FP<DMu67lgIMb$zk;p9K~$a^
zSAr!lAeHdt5WcJ)02Qe``7nS_@&jH3@IIiJ#2l-vMg|%zHtM)VN0>l+UWb@!1G`W@
zr_|EssO8_&tasVR3J<^4B|Mp){%oSw1;fW@h}OmBfNnO5j`;a=6U~pSf`YBH+YNm!
zeF_ZfvXXBZhwA~qn3AIZS-lVqY<UB;U8609v+iRxH7pk0b8;}jPsN&Bl<q<=POlSC
zPEk-&CWSlUDk&?2^nnzt@5bThABA{-`c#dB7es)lbKGPIxf>xvBj~V(<>bU_>oSy+
z0V;OaT0Q|J_G<9+RSF7<lzt7Gd-o{uh>0#)G|J4l`#(Lo58?+YS#ZX&=PL;bRE>dv
z*a_e3!hu9nGnQ4QkA<ZGpfo&pj|)9ZON@|tupi0)dFU;h{iW+*bNr|7sdw3`j5q*V
zaGO%~zYXzx`0m<OQ}4HLmu&3pd^0liFLP%n%bY<njk(<Sya8;j_&~;Omg2ancYJcC
zadh+!MVnaRa#&Q957<#X+aBg8Derl$k^0PHD5tK{+F<VK##G%rRQORsLPCGJ<#WKG
zwe<Gt66*hde7$v0m2KNEyZ})eln?<4=?0aMZV{wII;1<4?(R}Tq)|Wwq)S1%QA&`K
zl#uR@eXQr5{mu8s^X{2@Zj~8UT<cm#{OSaYScKiyU=CWH7vE9dp?GHI3?Md9C$USj
zep!;QtHi4|=H|kA?F3qW|HgN9Jp#7JW{mAFx*<A}X44uc|D;_>!p2_G?i6HDiX6!Z
z?)%&U=8Sbn@0DbhWx!a;RE}!iXUEsC17%DwV;?mLre|gbBqnx&J(&MzRvgFf`GQ;?
z7DNcdkJc&{NJ4Rb^OkCHbx5+#x6yqO9R~X<huOUL&7aCMcwmL+B<-YrDJL)AlFTle
zWJ9&OwG~lThM`_+fDLOf?6-3sC=(N@vT~lmCnsUZ=YUa0d7(z*_7s|m0Htu`-RnOM
z9ySyL2dwUyep}U#SXu8QAmkxpaM0q|m6@5|uc>u_6OoYMlecSO4g{<jy}gN44_D?C
zg3e4o;f6o7<vO=*Bs$YxhIfB*aettRZS2bD>>&Bs(TftD7%(ZRhcEJ#u#N~kF3|-9
zN>mmhOHlfxUu``j3_Xg=3w=%J)!YGUGdBTsxF^|%8)bB)OMVU1bI-od2l&kPV%2GL
zl?CI)j#+Cl-QYsS53tBKyJ5OsHMn-z?W#%58`M&0Dy&Gid%_s>G;=22P@F3qaZmC=
z_ZV93qr>rHw5=7#6GI-9%rVr&Xv8g^W-L@#Et)Grg-{5x!?IU$UXn7!)U@vLA>Jqd
zd^OTLFz{5-{tMmn58Ser{Vmv`XP@sA-Jmiw?7<zOYPt?+nAV&A?nBOJKO?r8O$~)c
z*e84`9BR(SY!g+z(g<sh0&g1^vU)*Z0*KYv!2usuWo4$hm6foe53`-c+Ef6fE}>7c
zpusdUJ~<h#N}p_&kenP^SI2K^VUhB$4duh@L5Kl)Xf*ckb$5Til#Y&0`Cq?$K>BFd
z+3(}Dh4Yb+#oQzzd5?9>!@20hNJj@)HaRS_FuUIP54U|^(6t%vyxqUgu-?3R)4oR+
ziQiXI=eh|kd)yyTLisVDi(S17DCsc#ai&!1R$GTG^)>OGqa{NdFDhcy)7LMz9D2~7
zDST^x<ta?mRFTn8`Ddj-Qb4yd{Dxj0TD<D(e-D}pT^-B9;^O!KxY9LkxVpNk;Ns(}
zeTj)!`H>bzBYCs0Jq=zg{2Vy#r@+T?0b5?IfBqrW#F{xF2#k0YvM5Hg-+fHG7MGVb
zKO(pQ=>v5Gow1db)j|_3EiJv1z>_DbF$Ht35D%jD_4U1r%gb_$0ZM)Wf$lRgP*njj
zOAEhr6NeP}*6tSlU`~>QIgU6dC&&Ev6G1@}z>=ZUQJD{920>lbJlS`FeH)r~^u#_~
ze=@ttDsg}X%4~jfM3eJT3K{NQ?X=;Gw!h>4@WY@KmU4JG1SBM(V5$9JF<=1ji09U+
z8q#UMF<yQj1qH?YH%L3Bq@<`HJU|ur^I&7T9-ENiIa953iCO_31;t0Z{Q=QyqU%PN
zbzT@3Q{L>C!RC~wSn9EFu2udr#I!ZWYIX&<UL_@^;IJ^0={lzq5TkLMbcS_A>cZ}J
zy0<-)uRvbuVrgM<OHfb{zT5Y~&Li>sIgU&mrOAUBwzUANu<h@<K=KF>y>|t6b_Yx%
zFX3I*c^<NSef=*Iirh-4FpQ6Y)JdoBsFnGU@82gN@D~rd`Eqx`VRynJOSm9Cjh1B%
zNhQ2v$Cj6u*V55x1$rDVPYaL$gS8G#eoK9#GRCt}atQ3+>+m<g_KO^Bu@mpaP>FsY
zzl;NoTybOG$B#swzC3nkHzg!8W3(e5mD94ZJ!hbMWcM5ByVc=5Y<N9^>FE^x?++8S
zQ(ukbJ9MAf!^Kp2XA=vbUk~LDjAK|$7tYy(J~O^vL@Y19uyN>WX*DR{N56UV<?&XQ
zw2D{D)gx+Z1Pm)}@3>94Ua#sxVS7ATWrfDa$M-DD@Eu}DV~x*Xxw;45K+{D9Rcvgm
zdEe;o-*=I}0%;lC?mGm)eB^8GlGrYG*1!-RYv?<HkF>TQFTi|?959@&E<9duO-no5
zUzB-*6efYHATN&|UQRSba(sZXg7mQ^7erQQSk8QPS!bxno2_$_WI$9^S4&Gt1=~g=
zM>P<25dn4cQ1ClG28NiJ7y@2nklU=!UENyy4|vJ{mE=ak3?)qbDdlwgv`Xpx%-Z(T
zb=<9OZO>4(5RC?L@Q^q_9VP_Fk#aB8ql&>C2qp|*U&tz4pzDA6@`d!FDc4P$)i{8B
zUv@+iTaFbMn$FPlRXjw={`T#g)C?&pDMm9j{>4V6lG*m7`ntOB%J<+?pM#yN;>pDI
z#XdgNY?+w9^r|~PY2<tcnclmdF|2n`vO$spN;RHd`X{FeY{fd&I&jsc$``u_20D`2
z*X7e|Qd0P2V$%_<tfzw56kW|@V|WVhA4|Sv_!0m1Z4kTe*y3<rQxtKnL{4+~?M3B!
zXN}5r7#!i|_Nua-Ak(cW?y7%f0YB$aFEXE8;WE#2j3H~J@#yMrl|YN>yhF&)z$o||
zERH{x2PP+PwuQxo)YisLTtK>WYfH=R(W2i{eaUuC^Q}*SB|$kot*2)(iCu)-W9pMZ
zV}7cTR@>xPEL7Cb*-ncX#aiX0n3$X#`8arZ35h25_8fpa6Kl_gy8T9-+otm0*~y3f
zOS*%EA<05NEqM{f8Ra6)_*54*Tf0q|nQqL_D>xpk(g0J6YhW<*<}qxxS*$NvOJB8)
zjgd5Z;))%vRrh~+Q8cPtq(8T@5vWrgxU;JA0901~{r%C-+d(WZ@Di((V1Zp-C4>?B
z?)%49<~1cm!Dia8Hz&#A;j!#!p<YQZ^=b@#I~JS%eu=O7MGrMY@rCJ(R<h*E&p(58
zPLC=dFvD{4^yw|Ahk%5BMot8p#U~`?<=h<&92%YBw@rS0ueA1F83geP=wF^%TVow<
z{fTJ07ST0Lhf=}p^zG3dB6X!<nZ3Qeeqe5M@lCbypx+Ob8Jkqv{psu^;pMFX@F*}m
zJRdqe2d}+e(8rHY2ZUoICn>}4-m}mLvC91%bru-;NF^jBVB|u#u~{$J97HkcQhZp&
z`L^8G)KnDED*2hqh=_Xq1-ENq;l`obZLuCNa@do#%AGOcxjzN=-cuV0|2H0BR*&@x
zhplgZCCjf9@^#v|o<4o5{)NJSsy1sj>|pDUd`0^E_mSV+wtHvjJ(J>Q_3o1_$J1ae
z93nBr@ZaeLlwYmK*w!X7%QR6@(fsGLL^_RIxY$S$(MBh%9G#blX2qPRJmi!)uAaZj
zhFbbm@yU6qti|#3vcn>K!m6{w$Z4C?Mn8NFl??uXm2hPpU7RD4B`2p|VT>|gSTz{$
zGL)0jh2~T*<g4&&et+HbBBPgD$$|eSV3#BacMzjBQj6UZ>vQh5Km_<n7j;H!#Tt`x
znX5<3)W81_gl0YZ1s4#%GB#{+f*t-R_qt;5OJ-_D0eYy{=uGV7gpb1@jezala-xDB
ztVMEkm8|cskkB9$BvVt<a5Ph>&Q+E}sE`}s9~9JBXJ@r=3kP4jq_~)Fp)oO$2&oc0
zHkP!4Ko28r#piJ=9<a93LR*$HqsKt4(qV^?mCRB4HnBo=i4slu8@Gv3GWpV#%FD|^
zTOb)8E5d43Yj1CFIaPxTVEzd1Q)cd(^W)iTF@`}PHnl3vU7k!ou7F;QIrc?gZKL$X
z69Iv_#W>MUw^?>p6(qf-)p&NRa<3_+1te_n{fl2YdIq%#+yeKIprWqZ`H@|ZbBRuM
zWHf-wr;_e&ZpRM>t^sV2Pu}0(kD|ZfMG5L85Onc-pTs}EvWSh3_k>8KQ&DqI50Ckc
z3Cqeo(N|`IZd(+U3k{Khs)g-<l0^9+k(~}uZOQ4q05Kpp>-D3jz&$ttYyd+-3R4C=
z0gb@f^Bnl)!{3z_bTzgUdiG0#R>O4K;|m?La$lrDVw+rC3-kf>rNp{z-3IsDzGwd!
z;k~r3`Hq(vkJmbEzbbtNC<7p(=*S;qU|=+JHf<nho2Y3HE-nI4L$a!0S!_+J7HP7l
z3%CpyEB7W|UvB$Bs|uZ<!p3Ip!X%t&$(4?Z+>jqDHMG!N&>+2i`!>Jt#kl-ErFUuF
zyg(U1qpttuM8a_W0n>p~lM`4wmZK|RCzC=pXBrFo_l{vi0AIl-XhK5%7<%t^teB&R
zlJoVJ-WK+fAt8H#lxX?>DS*o$z1%V|pi}`mmhC)|E6`WY&9%(-_g-VY1j*v&RBaC6
z2_4_BJx0%BQe5mjVa#*d7#~_W8bugcScKgdtbwh(PQ9z$i2|t^B4mv1`|Gz1n<XU>
z*UVezeVpe%kPl{O7XuGQ>{YCC2Sm`jZEG6lOEc&yaKF?!(tzAh{65=%Wk}$MyOYXr
z_JX>)dc={a?*%_NAXH4#g9D)WJz!^7xU;;vs{FU19w4}MVRAdos}}?z5&@8!V{&og
zWWGW`VsTwNLly}E26_zFUMhNedOIswVP>x?OiWCMK5MMM^hr!*5}f`cOyB3WJ>y|z
zb@zFZk-?S1ojVI=#-JdRUhGup<@v)mYa16qSn!@WBUKW}_?@}iu>87j)!^a9zT>s4
z(WXhS7s)nkq5%aGxBBPd#(~wvMQG)hO)s1LR6rYWF?;=k2ky9AZCsypYen)EGcavz
z(q68}m((<W+y2SLdd(W1ks-{WbR`OsvqTSl)+DTx)6>Naw;4`NpY!uufaTT0R_IB;
zHu>`><w*VyUgZ7zmVuqian7-<cp-_O5nx0Hh4%)ZE(R#Re6fEga0nj_|Mvrt9*_e=
z%Yo;36!zf*VZP$!C*_H>`u#$=B(a9;tLIu;M3=sUb1k%kAD>}YR`Bhwq?18ymiX~r
zeBg)V?=K0YeD<p4v)a|QZq5EE4mrBD2Bp)7)gOIeU|=-we`f<1o%H*6Ux4~=LjSy2
znMB)NfP!w)mwcG}B4Cjp=4iRjBOrVMQwteYW6my*eLj2nOi{7(i@vU0Vogzz;7vSl
z`Mnt#UtbaEV#opTb9#!u#O{Wt&Dt2#y4Sb8;6<%s!|S*GBix<`Qv-j%Pf3!*aw^}7
zM|D*xF`8qgpE{Of^#`b<GjUY0K=&B#*pmB+Y-<x}qjnw`Z1`oKZ)4npzy>ZrhEgNf
z{6oS&bR_6E`NHq@*MrvkIlpaijRl0Ygz+^?5qnRxFyv0OSP15Ob1mqzQ$(W#VzIP+
zqa_6!si~#AOboq6#yZv<g@YtTI4N(EW`<>QyKlRT`z!W{4?G-P9Ibl7N<^V9_fJfr
zXf%-1lFgKqiwzqC)%sU)gulNW;H7}OBG+Q4#hWj;r%~J~jYyG56d0KTs4)O9fYN4c
zj647DpSCq-1`I<GV^;<%^mM~%Tn{2W2w0Z0<Lx*g2LXTD3%TJ>7Bk<6(fnvg4=BUE
z{e5|Q4mLcp7<3{m#RvC)Syy*l<wkOs`p?T7)YpUBLtKa<b}?JC2$oKkXzl4lV0n=s
zD{>4jEG%5$#t8I>hyGyJmkcV3&*L-UZ)Tf!h2r2l#Gp$>LZWFqujVvS>%jRH!ci;*
zc_XQQ48c?esI*J@$ll>0yJ~1sMn=&2F;(K)G)bn3>*j2es7{q74d$W;B_OvUTaTO;
zu1!T_?<Ov3>FTz1<n2)T!qjYA<7YEf<7g}=uHBDRQh)q1YR%(&X4Say4w^p}`ztRm
zujiS12Xrw&Qfhp1S1cHTMOpgj!zG}TFhHr(42*z^Qyc__IV;bttv_#g-ln89c(A+l
z!q6wg^Kgw=CqIr-Si;q{hHiRj2xZpyTiv+TYk(c)lf7BVZ|w-hef&rVSAr5g2kvtM
zUf9-}E{|;L4|ac~$@?|*_V>3#&K#X_U$PJ5lmpn6=;c;m0)Z7v7)w9v?OU}~)3-3_
zFRWy_5r1`n1q`_{f?_sRzjV|Zd(%rRxnpfqlt|}VQBjfKeTT1dMGuGtkfQ~{=15B`
zd4>KEw$*eYk6h&(&Hd#cI{@$Zv_g?8cUqK@l9o1Z3&jPQ_gg!{dlQm-Ny;Ox^=5q}
z6Yh*WJjCBzH(LYIu|WvMqSxTAQd0`_1?;o>TPp{ETK-V9WG%T-#&v3ltfAlEpMQOI
zedW{MCC@ksuMZ%x$&Se;*cmFy9KN6CKi>nH#~mE<qhvNAkfY&Kw$D%3@4KJu<V<*l
z6{?9gKc)Hs^4WT4=`ltk9s`!=2fxdV+a!)LF$)>b#f|othkNw?{P|P<`rjJ~KO-d6
z0TQ@khp7s)SLJ`bOJ6qaKK!BpyB=~*$T?ntTcYB7hMBhQpRalU=^|q#=PJCZxu2Yj
zEiHXsuMSdzLkkl`B5E5>JZ)TB6@RB5mZpHUr;jdpfP7XdjW@~k@V`pu|D!!Y#ro-E
z3k%XS1U3x=gAB<SNNOZ%XB*Eg0GvtFFBr8>c>kUyZGZ>D_a<%yM1h{ay;!>vKGBpE
z-OnbjuV1$((E7DbN<BnHK#H2>OoMd9OxuIrn}UK?X>xL&2gAc0?=)K)F4EdN{_ssv
zdL67r?JgF8kn+7*ra6>Oq|#(!Ul6d*-=&7)FJA^qAzps881S_m%2i0%jU(r~S5vb*
zt3CMdHDE1o4{4xI`$t9D6vh@f%;tprq#Cn6e6zH(!v`8)-4J_tRTf8eD9tc+Z#Nzr
zm#=so{d=U$Z~$u5kj?=v9M5A)t>wcK)k1FPzk&~~V1pc7|Iw6&?7o<UBJTFnoFBeC
zjV3i*eUb)3nXb6Ere<UmdiXRnxCRlgfCb*Iut@+=@%4cfNLbLmxj6u3YGLYBG-`dY
zExM6+{A_E>Kss{1YSLmqhlfnQ;dmy@Tsq|6KdU-eabLc)?^)hKyXgU$N|jhi)-{$x
zG7LUMH&7rtwG(Ebj-MI2$ejp`;C(+o1fYcxGqaP4cvHY;W9*u-+rVTy<0&Qe2tM=8
zq_5wTKjOc3acTS8GXjjD?y3j8U<=p#UFD?0XMT=uZhYUq=hocHwMDKRB%HCWrA=EM
zA=oQU@P&rQN8zf&fl<a^K80g$vbtzN1QdI1dGdFWV5^|3ZRg%n6t<mTh(6yfd`b?l
zxP!kvCgxN3R7BpzMm?YPD3OiD0?;irH3a6PXRT>GHfPg5vz|8L8(Q#I)N*>8A7|ye
z$ZqrBZePcZ$;4RT2}Nl}+o?5I>5B+RBgWr3HF{UT*BebKb`O_`6omkX`5_K%RMI@|
zsWGX)vHK3<h77_Tg+)=!%;vtH_d(eUmiQ7AC%&LCO?QTC!py5MV+1??hEH}-Mqp4L
zr*cQ=Ei_7h$~kZ<pm7Q99iDd2qul3gn0EI2IhTNfhJyN-Og`e-eXi~?EU!5X1k$jO
zmPQWN0%{ERy}y`0(?vjdPT{D8{t8N4i|F+QQrR;;H36ywcMlI5AXVVbUO?M;BU=j+
z9nGS)1lp%y2Ehga2h7D$x!(o{&)_z`e}|B29$>sY4#8?2ch*Jr|EmQ+uhyYoRwB3o
z@;4C0M7aN~Do&C!E5Eq`49Ho5v)ssLl3dbX^TZVoCtbA!Lnp4SzWoM%3=3@%xjZ>N
z-Z6b?@j~?luquH5>dt#!yGW==5pVbb{{++wbhP|*0AaGT<Kncb%MQ&q`JlO-!TtH?
z+ui$ua#XgQI#mQs*H>N<lodoWAk#73!$Z`$?>-PYF=7D~5OvK2EE$XIr7N`5)M6EO
zAff;S0R3X8ZEYpr0#p#%igI$TAgXZ!`B8gk=gWQbpyu|zKHZ8xZDFbtzvfybL2cS{
z=e`XvaqWIt0xnpumis&47f?v0K0xL}8~6<A&w(rLPdmn(@i|T<uz~7L3L+lUZ{6Lp
zY`Qhilg*8cjB*Tr!w$d-dOQ=?jHae0)6?bvG_&FF*1x~7*OY@kra%1&p`hyqk=a97
zAAoGsnV<_qZUPXo_M=xFda{is0|_~K6f}bQvqSQiS}^XHd!HUVzJ4rZbaZ%F;<)k&
z84OUU4kRPArJz~AYklvNJAmV%W0Oz=28zh`JhbkRYnz#&{PV5P?;{dDzP`Eycavtt
zCS#U2TW>a2O-Aks68SL>!>8)pnWr@!ZZdA0X@#0dr<x18`1#G+r^f$=&CE2vgH|>v
zA{>w6M58979RKkjUN$yZ%SqO;6JT|dkPX)>bAzBoxGc=zf?<h`K{CReO&6#dMRHAv
znxzK9uh++LVM$BusC?PsJmI2LFalcQ(sEGM3c2ryZJ3z<ydVg=iTfsz9SVQ7HT~Ks
zc0xy^X@uTa7ieGy|3>b@PFlgefG=8nXW&Wm4%+S;`q^ABxB3gm-b6S0Q<57ffUdP{
zH(hf~xdJbKa-e2K9vOLtH9tRG`We0_q+~JqVyDH;{i%DHQV@FF281=88K{#8;KQh#
zZo05aPuEnQw$S7FQWy8v&#Vt{KW<nDpN$J{M|Vv*#Bn%_;^X7j)z?331%lC3qGfn)
zagmnrD=4(3qe$j~?1&G3MG*$n`N7(#nzKEuU0AG|#YE?*KsE6sk&k`WI7zvsTV-j_
zJ3Tr|%#zf*arpIVoNSLXD7y={hrXY!$yb`3E2QxnZ%xM`jY&?^e5Tz-&$C4C!=*l#
zcPrIt+O7Da0B-1kVl6j7%1@fE(*oMtrFJKWK+1)@DM6=V>#curZd=Vy(l;>B6@8ED
zC4dSGaZQjQ+y!90smVnBs};GQrK_u!&jG9f8|v*YIjEfp5w+{T3gIIl>u!(WY!%!V
zB4nc!bj7K(7-#_vXUCC6L+AV4A<G@VYrgyNwa8QaUop#*0nh|-Xp4Y_Jz^1dS>zf=
zbE^FM*~*LW9PRDX2|hO<kes0MmDBm*Iw*5*X`g@>kIVZ6!^wcF%Lxf~e7|%pXX3@e
z!C`ZnAq`FFzXhKDwtpiQj*FcxNY(`q9}cH<7%fiLOKB_O@);Qza;-+prG5L8m_)ID
zw)Fq}>G}VycL$!rcogG7iWz^Y7LN9df^XAyKH%iU$ETcbE7854TmDg0=XY&iIC~6+
zPylTAQ9b5>R&WLOQ|r#p3bx7G?MU+<I&#aauB(ISkOV5_>G_rIYO;F$T~hTQz~Xpq
zwSqt^#BJ|)jQ~M7s-|YBNc*g4wtAN-%M0+40nIM%eSt>Dz%Vz{_-#R;dJ;85@M-T6
zp!{uPC8G17xB%ePhpYe>%ufOF@yb2rx;i?!uU0b0>tCrQcr5Ufh>N>)2wk47`$A5F
zI@=?8dDeq}j|g~d<U%w-@f=!OnngFu3Bt#KHzG#`S(=N>KWrAfT7Xww9V@{{Ma$bJ
z0m>xTxUCa#+TaOyLmB-Sg{nV_ZP^%>NdURw_{n(_=jDKSP-xpg=^X^vL{|(&8Nr93
zT&QaHY`jF5ul!|4?ZUS<nHsxuOyJN{WN9xiFXuNmqi*4EHCBoA^vVg;UiG{+o&M@V
zh)*RVCD&^Li_SB>-yfb*O?XK`fdT3$@8u;qP^0aGIVN+ft442<c_3RZs@f){Zx59C
ztUb<}n!MjHobf6uKB|`Lf2+xH+YYcC%uXQ9S7+H>PP22GYc|ksKta(^DbaD!K8Yd!
zUG8<P3D-4zk<iTz|6t<@;`?{i7N;nZ5+uP4RI3;L7ut?ZG!&z`=6Um3R*)I9f|`V>
z#yECy5T3EhdelI*3#Sc~G_|{@E0t!apTai-m~=s*<Fut$RX3d{PiH+=91|V=dgG6c
z`@j%v*F4swe>?py54*4pxBGkUgMnsYyXiwhMutMt-W@JtoHT<e($EsFE+cOX>#kV+
zcl=I)e>1_z#0B&I=RqIr?|msi@qsR#MIFRqpco@bd`fs@*Hc^=A>Odeg$ShZM+n|b
z$0Eq)89&M9+<#3fgD@H1<ifGpLB$ffu|q&g>ABNw?EaCK>Yq1<vx|UbwNRA+-WXPP
zV+y6@XUCnYg=X$hcZJ(GB)gJ7+%03}z;9y2knJ&PDFeRq?oueuL3jTTDNjX_J$HXI
z1U;G~r}*<uE*!07^uC8ipmn6MiNDsi1j``}EHVd7m>%^Wp?i;?SO%<ss-8eq^agA-
zU@R6IprxS^_b!}aB9m2;Z~H;ccbl9XaLnwHe;_dcmSTQ&Rg2|G8a0M;VWRuR3AgX{
zr5kYc6tD*5e#A$BcMHju0$z};m43X@sf-!>c7|ekX(`Re|0h>;&T|Qg!A~k$34Z_M
z%KX+IZP!oL<@69GR<YpjtzYyW?wsIL?RwPsY@YvT@mx;s!2=N7b8OL!m0n{;L`2Ma
z7zkwoQUqH76t&0Hr?c1(T{rl9B%K$3Y`D!P#W>nrd7t8MMcws_f+-|wPt?TFdAa`{
zn7D89+P%4Uf2ruIP6XEGN^_s!xw)^T0tf5>uBGH&ls24hR1Sb;24Cgs7U^F*5ONTH
zkZEL}`kuY92~*R<Cpysn`}0S^@FTH*n~cnwSBUOo=0?Cc=so*3bZ(H+$%3Ev<>n-n
z^eGhrDXa$Vocn?7*(gtvT!{Ujem|ZS08x`eE{~=hF!1BzyRQ**5X+8%Sr`YUy0Pk&
zWp5%gj8M*nSAZ_DL=6C`2YV8HS7?yl@Q696hd1@VzHR}rlU(8obYh8Q86XLfT@@aS
z8umz-D7pZakbiCW{-IgL^8=tbsIvX8Q7Vpb5k;Dp{_*i=6`V7T@CwYPR{(4D0W{FO
zR@nPQsiy)gzF8tZkx4)KX4&FHN<ifRpkxaq&e3&wz`XX@W{e_@&w+R3YH2SUv@<PJ
zx-8rZ^74{>$qp}D0@3fxr>NBZ`q)EWfyn{j^6FG=DP6H<iH`eX48xl;(W?_QW8)ap
zJy8Vzt7V+EUznXB5Tc*QCFgy7UOi|%`tfZ5kk>}8tqJ7~R~P%?bp7eSDvf+$ef}ZW
zfS7}M=^gNS2lMECatzT)j4CSow~2|(YN(ihrdU6_dT|7f)Qn;WRwm*{Z~^wdo5Gba
zds6_UDZ}}KB7kl1%*{Joz99QTe&iEhCo1zq+es2Hb&wE7M~5vX7S=O`(tUv3xxRg|
z8sVesgC@#8x(klRo;5Lo8zBEff6JgivgC(A3Ryrim8<{l$h?$2WcTwSIp^Y}sUjB}
z1}fxhN8P5CiQE%itTwqkJA`+iFDozaHNOap<?Ys1GGnluy*ZEdIX|L(kQ?#bU=@rK
zv1;G1&TIh6&`7*SLF&eV>kbF7wQrb=%SbF$)Z+FH6e^#`<Ur2D^LHK{gF}kjX@PFS
zx6$i3|9__$spZ5>O@U&hAtoet^QAW;xNQ%-IgHpHZDCFwGo`ssoA15tGb<}AC+x1b
zuk-s_YwZ7o0#HhydbjxZ`tFoN6Bu&>CQe)PjQ5w>KWUZ-fW|HeP!!`I@2lPS=<=kT
z;F}JIx-^;IX@l&hZ0OeX@A+g2IHQ`b1cHGCCHZPlqWJ-MD<B)tW;|B(y{}FskXt9T
zu)83S<nXw)>v6CpEc<Xpt8@jbHC2z4g}<@L-b|xlnQf}Kul4%a=8w+V`d6IV<5_-`
z?G<LTvNx2WOhJ!Z{&9{0{hsr!Gw9!L!ljP|Jys|Xy+Qjc9}?2j>At|SP`c6h3GUmu
z5haUx5VGZ7;3L4qR_3%wR;+hgVmsq5)lRNl#2%RhXXHcy0M!n@KRV~SjSV(fG29?0
zRcS&*A+3fb#Wfk^Z=gU6fT=73?qj6nW~uM){EqRdAQ{{@oR7b!sQd<E4MuOg`|ZGl
zn{M;u=j8zb&qN_q*Cb_?xbj3r`7z}806HISXEu~uYB~=y(&>vcdY}n$$;Xf{67Z=*
z5Q4@_U9AAC2!NFQQADgrOli}VI)fLQKZtx_yiavM;Zk(<Mjv3r#>Qo1&wJ2H%u3Q{
z>M+oWziw&;qxsZE&E+|M0+LL)&#K7=w~fE?PjBxFNj9AW`m2-0+B+HK*CYe$XfPh$
z!pB$Y5dqQp$wJfwurQxK#z9a&m><wi4n|VD`}$b9LSKuQ=!jR8MUGR3Uo%j2(LAi6
zB5s$LTx<9g4zfkIM&mY_3GQf8?uNn3hK7c@H5Q+)p9hyEk*j6#l%h}gF~ARf!~e!E
zSsS*0B+BQhGDi(78Vnt-VmveUYcw<roaRUVyDm;L2!2W<bc7I^@QuGa6qGg^b?;Fw
zlKK~aO9|t(+w58h#YOc{EL5<yV3Uw4_o0?F^79vJbKxjEvgL=-Y&d=K_u2KN@MssC
zyH|#aM&cPHq%=sYUnCX^X%qxTEf05w9m_OGP5qa6vNe%m8HtdWf&4$oiCUrhpq3@b
zzJqtd9Z$~A0*y%_4nv#(>B$7qjwFJbR3_Ib6YH<_*yo7m&l<*sL;l93fK$w8`CYZZ
z;?aSU?KI~Jv=<zrqVVvY-5@m)G}I2VoiuU;d50^^mmNqQA+UT4ZMKaDuyf!ep-W^J
zl*nPqLnxz!1QPC3V}Qy!gRKdtO)N(lY4}u8F@y<A!~7aB^$2*H#c$imIj~-V+n?!p
z|EGGSWj||IIk6VPl0OrP1H*C)m6mpR<Po@cIu?r!8p&XJz6H?hGyZ@(85Yp^Ogg*s
zXpx#2DXDhsyu%r<?OtD7VduZFY4DYHUjqNYcEl}1asU3%7yYT11;Xb2q-=)YFY;2h
z;TDX9b3aJF`hsj4i6_#5&Qq@D5AgDIed6Nc=8HBH6(Jv~xQM;$zkZb{(d;{7X2OM`
zJsG3Tz@4IbAI_zqee?G1k1qo-_is$R`p@0}CWOaf1}8If_|`DM*Pv~%%=rf)WFWx!
z$+>Cc3*w^KSiHQmB0cT1Jk~tb2+%I{o*jcOLq7N^dg_x`$?lizcu*`;@`frcI49!F
z^Fg-LR-FBl0z5|B4g0Zl8;}JB-ZcG$b9zQblb;lYJ3mK9tNZEXLHkZaL-VE#(gqfx
z!<*OgxpCY*%pT}I-)>@DKgXjK3bz``C$67`h(wSrDrnDIu&gfdD>5A3xq<Q{t(NJ4
zA2A1-7W0rCD9wp%aO#EBm?$XFFX~skn|v?L7UQi(J_gD|tcu|WRR2ngs4Ka#_dG>;
z_+(m|6fek_PeO*?y~}MX-WyROH#G?jTzToCs)I@0bKM&TpQc`uul^l#K>mOnmEQVY
zsKz+q0pChaku3~tY)R-N^u`d^czL~%;pR;w-PYyz&Fx>~F)Ai=;-JJc%fR70KC3g9
z2iYh7x#J#e7`do55aMzp&y9H)jkzkA$XXWTA018O?4Pakr*(ZlHtB2ca^NnXpR$=Q
z=htTZ$vBPq>FTpF&JBoqY#F)81vBZrdxiaz?Y;%iZ)bY{+ul}6Z`L(X^nE_spv1hp
zOQX~#=y@RfwijyH3#{cLkeMibK#c<D?K?h)%vJu$;kqH!<9vM4i_*CXt_KTjz8B@j
zL)!-juR$oZ6X*#!V$?Toj`o0Z82SrY@o(V!Dq0+8eU6328((i&p6p&g2;d21dy`*4
z^W22pig5#?b5{}aU}Yo13IRvWfBD0MZBTE8oS1m@Z&_7Im|l%-s@$N`s|+)D_d2-~
z2k<1rrButan5ZxVCBNU_Uch-(j4T`+ILpXIeH)sQwEW3{-_?lGI4IglMZAOO#N2!)
zs%`i{=W(XIe#*|qMsV9nCO&Lo;U#Q|q!3S7wO<X}L)7vz2|G!xxt^T@#+ya{i-Qrq
z@JIp1Ug0(_M_1Pte-z1`g{Ua-#pyiH5P<lem{Q3D(3ct+aT(Y8UE>iE6Z5Wd@*MIm
zEcWnRfYg_zoQOUkK)kG$@mPw8=<niOOCxTmzOHV}c9Y>#jA5RT>1hhv@g4TwzUt#w
z78Z98w(iS~6O)ht*yKPSbH4n8oZtCxcJp`L+O6E-YL9(~?*8WvJI9h?M-n;I_#Lj!
z&b;pAYE1mz*Ovn7FZia9u1_uE#G)aIh(g#a6l=OhO5e-Vvu!AWXcX*rojH<T<cDqt
ztD=G4Rhn6=;|Y3x0C?nUTqr#=Geh6o>pmQ*sfjIl$N}puet1md_}um*bD@HSBRP=I
z<qdIpWI`g?1>N}5$EMwH$(EKmchWNcoKSYQxAV6a+vy*{^#Rmae!QbYUq-6EN2X20
z+dWI{W3|1XVFB+esv(}66>L%eMpiJ^Og1N#RMgdftqN^_+x|{44j!P=Kee~y_Tl$~
znwyPopu2<yN&Y!8GdGXT&i;x2#gkh`v<U$}mI=eV(m8&#{wOXoE{-sI`_H%IeBxo$
zPuokw8v~o@5y2WU`fghvt)kr;$$m|1)$Py+`~fIRd_7(wN9c|+iWt@scR^6zjVoSN
zt$WXC-pV&W>O`=jYhjYgR^bt{m7YJapkd<=MemYpu5?-OlYuw{G&(Gj^uVX82}Fhl
zE8MJKZw|=(Ua0P?K5+=d$)fAsHE5tH)k~c3V7fO`*KX9sgGc+vA7MixgM((L^Ku&P
zn@t{8dP5gYUSh~?G_jUIX<X7!Y2O&`$R(H4%EX5lHOb8#(E*9ZYf`9G<_mcZ?*8a#
zw1u}D8oaseCLi}_2;PMZLyAnFBkcvqg`iC4&<?D&X=+D`IIRCN$&zA{W(EW&WPi@Z
z`d#|x)A>ouK4PF~Awe#W^sHT3OIJHUjR_Ik)|gJACodPM$51559J10PO7O2wR;epy
zoljX`9~TszJ3{yl4i3S=!Of7mfYXM-(DnYUOsKK?i$6Cie;P2noo@}<A8+)ElY6bq
zY(z>jMg{&z_$=;M`C1O+sF5;Sb#dYRb$&u)|LLkps<m}^_)Q&r(Zk_ZM1`0uE?!=h
zC2e8c(BMV>AdER4b&-<GG8Gk-fGpp$dzhHJ0HLCTNY;ZAlJZtZix?rC8a;{Wqo=;j
zm|))gt!kvpWkY+uD-Y(x?85`5ayx~z_z5_#O!`#+>j6)|A2=OA`V_!{c36FM8*G=H
z>&IT(?6u*49K`CY2*e+GpZf$}2I>$i0t_Tq==-q8pf4CNb_%oaJhB|5ZcTsp&T`Os
zkRdR)CsWu<SzG(r_~|*e;Q}5x?{lN$(HDm6&n5p@J)5ohc6E<}f~`(T=IK)q@4P6O
z?T9iYCJqA!1$FEriw9C2yJNZzQ99v3gUW<IMQN@a5MgBTX}UTqG7<*@#DVOicb3=I
z6Y&|~MrO0mL0_Dhm`LCXomfDW1f;HtTt|(k`E|SUY5dC|8&mf?-k6Zwd2j(#94;1X
zAt5<=Sbsm8xbLqaB1N6b<yR^$nLwp!mGM~J@xV&1sqYQHO-qJ*3}qMcT%y*1nZ6qy
zW$pWT3wq@T)b59=IO5_hpSgkp1Iw*Ove+ko9}=T{T=4tR7mC}o%9B5qu_npUS?95z
zFHZ7Sc)uT~RSz&Um-Y71U5M7htW;;A51xln99^QcEeu;JDP1Ua;~PvbgvJoKkkYIK
zLk4EKIAZ*(i|*TAF|~ttD;^E|KfeiFW{CLQ?CI&rU9q(@o3<?UdYj*!Jznpkr$+%~
z?C{@<j3<ON@3O4-PFD;qtNl)wUXUHW(9wwm%g!Cwtu6bT_o*PT_0vkqtnYaS7x}$=
zn9CCXYybF9Q^|7z0|_``9+xzYmXsG0qNy7I>aC1<ZFRhVM*BkM-#>|6X1fI&$uJR`
zGTlbc>YqETEG&@WlFv|3`tjop`D8YaPeSigQ)wP7L>rZudw4tn@FKdk^}(dJPU@RC
zFI%T69$4V!+)FXnnZ)usvhC<i+NKo|(WJ)uO{!W*ba@tH(h;e#I_oDEv?U?oiGB7|
z{g<|i)5i2^3iVHeMp@&!*!yVcSAd6>JhDxF9ty&t$Mw_T7!AdZ*+w7k_tKwq4aX9F
zun?Rra&Z~ta@Gevu4<bIf&I)xBBgOS?2@#>E<@N0OG6_`;13Y~YDO#DoW;MBKiN1q
zP_h4;qVL@XGJ>O5|J5;OYV`CA6Em|9Y8S6B&qm$BJFEV?#*SRqn+?in+vXG>xy$0x
zlES;=&8eYJbvbWxb0z5L;@A7z+IobeCXZ;*Z#<q^ftM<uIJGu<O<ebHw5Zf*W4u;r
zn!gNyzkoj=X`E_rl<X&6-Pm9mf8lz%C*5L@5ZYM*EiUHj-_+I=T1OcqGt76~HSEll
zmIpxp_49OoTmVK92tq<a<lo^4nYK?VhnM+=O^(QaKQiy{v?*<jfz%V8!b^vl3vxWF
znYi;~?C@EcSPC={-03_a%J{U-2*abAqu=kESxQ8vxAVKscbd_OiRwDpL|97+{#XcA
zrnn~oV{97=D3p+}F{ed><ub&a`N+r?s|*L9`C5!L&e+lL=0%cmw9=P{;~9Bka`mXv
z5AjB^@J1<0zxFOsRM_yR50rNN{#~?t$b)yPp_lQ=(1hDrXd&teMW0E_K7RY9JDzHH
zg3eFc+Rs}7W5eOn@jUo^YBh@L0|Wx5-i_U<3F?t}_r1#<=TX@VF0c$dmducUI<f23
zAwUGs0U68a5Y$BaECv)J0NPpG*nl<eo~h|a8{(gE1Qz6Ep@9JeGuf<#3+Lg(hXhnv
z%A#|kWht_BpFVvOlaq_I4r<clxYbv&3KSi99H_QBTPt7<?1Bl@X?4(;3oO}1Hcw?_
zkSR{oozaDU;UiB^6w;DY%gddDuE_7Cju72e_uH}Ex^*W)YEN0h%}$@Lw73|j>0*y{
zYo<}YN)QB}Ab`6!KX1(S=#iI^QrBEQ90JFQVUP>=q9rlYo1XTJLCCL=c*hA0pqwcV
zxYyq}!g|&Eb7Vv<aTbuN8o7I&9UVD!TE|^&@7|FH=pS$WjZgt_<8EE*Lo+O6Ak^p$
z#u@18=YJKB1d}V!Jj@ey!C_CXb6zUQody@szhXlLm1ZzvAbk?Kt%glkMdnm~R3r*0
zx$*G?0ckL*%BpJt>3^3VwLk%3320940(2K?J-u{AH%ObJ>xV}{9jfV+Rb)8-9u`(0
z-g{oZl1V)7bH3>oa|TCiewy<=9hToeBs+gVODjE!tIW8}=W~YB|DNZ(g(r$2bq#!;
z%>xx?4&fX@K%W+c2$KW4sB#Idi-90#veBz{wd})(59s@{3XhevAiMI0FU0<opccqQ
zMn!3))DV*KNaKPT+!2n|fORr&$Rp$-^0)xaf7dUi5rrp)`;|WDt}T@y4GSWBecj6{
zp;7@AwvF2A-!En{E~-27#>NTRaW`(hd5{IkQ^DG5w)g~*+xFvS0q<x91O!?k)6pdM
zq4r?c>j)IS;Cv=$y=mg1<9Lvn$RvKNd2C<xtFfmiLWpM{0=c@oy9tsyVL;01IR&vu
zlp-HcBqPI_*ysbOlY@Hw)}W5rIc+3$8UVBta|7f@61TMex49izcYA5$md}PDr7#Q&
z0u-^fwkUOeYpuykw)$_THp7Cf=27n$^L9CBPD4Xu{JVZS*H4%!hyNaQw5Pw=JhaB@
z?CeBhjnmWJZAOrx#BJJ5=vnft;4xKw{Y3CYSAk?yN6CLm?j3sij`4<5K4>p@F1G#F
zZ{K#pI^J4}oLp(;!pVQ08nL^`XmhFmDr-4IuvWUD=<8RVvSs9G+P1+$D)}07jv2C6
zwchp>fBK}nBA^eX1+vveLgiPP?^|*%*8g?~_L#i2$;zk4lvR}$N>Ga*?Q<B9(G&b8
zQp~z~k@zh!(KIpnO<1fA;ks?aSMW&Q{Us?Ok>0(_aF>{PN#GBUTUK`uO&3{2aL3*f
zl_jx;`hbOkLiL(;jIezQN5|u{Z+Usdba$Moh7Q+XNQY&;ajqQV1yK|8&c5GuEdqRi
z{!$Ny$QZhq!<|PML{{d+zQicW$q|eyBB(_-l>Ax#uNFWQAB;IMM?qr}P=EjZqc0P5
zcT8F3=e0daCPf21RiEoDB~z%`&vXx@mhltB9<GMKptQbZF;&Cf{qxJzdZkI1Vf(wD
z3O2yS6<7;WRXF#Pe|1}O0Jg~B&YSV*>3FP!#8-%@h%6KIKH(~n#0uH#rp}WV%MqG+
zUG~?QeJH=RBXH%(4!*DISEFXs!EJQWHZ)boxhHt4vA5cOV`dZg5RWID1vhFtPjkEw
z>->$`u-i-eYne$15xSz%fk@Jzh_qQ#RUhdV3iXTMnzqK{J`Qjcqz#^Ar8e^*>Y=OC
zzWG;U6y1m!9ks-N$_%n4aGpwC4?<mo=@oSLk<LX#F2<xc;l7fUm4&F7%ixO()R%Yq
zxNx2;C?M5xkbfn{k_0Fb(cQa?fKC68)4jdzVH+3RxF7`T0(N!i!&7|NJ0TQtXK$|+
zfIjM!z80?NnYYrJD>QF=;?up!0U?!!ZwdHQ@FJv8A$trm85uK41ONWj4UddOZ43XM
ztAWI*_%%G&d*!}mQ+7E)jfR{faAa<1Sea;(fF=`ijcj(zg1(%o7@Q@?@S?PSJ)5Uo
zYtz>CoC8J&4q9ynJqWVmb8>RRY+k621sr96mM9gdNg%)_dw@paLvAjrL&I*U7{A$M
zRpH5I?JPzMY3#^lZnT;9yR<YySIBqt%=-t@>tIB>xjQaMu7@<4+tz<OggX}~^tTTT
z;DfqCH5J6&Dw>)y4g93sFZpSF3z%zOK}L&|jLgF5i@QY|p2rMITx%1RjM3527~eq5
zO;(JY^s%t9rR#sdLf?+TgYJiD?u+tf)>o&ysuGD^RMya-|N7@~5{QLG61idpG6da7
z#{bb?B|<7DLDq;=T3tduwK|fPB!&WQ^D8EQE(TIBeNWATR{1Y3y3rX!KS{#bwjjm5
z?V6gZEf8`FoV*S2?-^xjATs{YYV*F;jhlPrP;MPKbh3*Q_`HJaKYy01sx#8hd;}t*
z!b3j0g+QAzZw3L|A6K7=m^8CEVNu0s?||T?IMC<OGBVzR7=(5J$DBa3JY?qwZ3qLG
zzUwQ%RP*EIaKe>(Fi7-4o$>%wi3tfRI?|=O*k*#mL?>!|YP(I#VT=4yPrC?m{h;zg
z8YBYR1^O0H{Iqq)b`yIk;=>F7o^i-x;@}M1T>KL1`Oy>MttbT4dU^KH@bDcxJiPWm
z{=<#{Kp&V`StUW17#O(Laf9*sJ24Cnd@?C4hRzOsE9ZNbv8O#fwNmFXk&*T<7G>mT
z(jJS-<b4b`{DnL|lwn0B+A#I`&DceZ+mjo%PS|^ox2@j$Walj(^VwtkIX!oifE(|>
zfGqz%<R$XzQ)$?6O|mM^`-R{*)JeQ6b|!+zh5Gt>n>uEK`(e)+Bw@y!D>LGT?1<bR
zkGHZ~09vY+CEr2dQSkeN%xRK)5(7#QEG)kFL3VRjN-Etpp$-l08^-YP*t`cNoF@*1
zN=pEm%XvvdqacI~VWXl3&MhzF6{?>nUjW-p!+Uh+;iDe3xA*V&_|O^{h`f9J@7|Er
zLtcj8z`(y*e}12$o2Oe^IwZGknP2*CSG=H`s>@d=CmM8#%8G}Fk+h<sO53l^%p(O~
ze=Ccph)eSF!>uOK&Y4qIQK6aiF_;n7(w+L$@9Ns>qsy-H`~7)(J684RY}+1W4orMX
zTizmkQOaP{n`jY!`Hh4mS*vVL<JYfWb6bBNo0{j-@bI7msE}Jz^Hm{Ql$klEwBvY(
zVCL1+7&1-)Z-oS|B}&(&%;m^PEGR84V`H&(vq~8Pgy6A4y1O4f+ycowdac9kFpG6D
zW*Zk5ALEpsOs9ThFFh-3(D;a@we<|cn*4uix5B%k&z}#-?t*!koamly+-AT_EdYpv
z;bfMzE6<Z1U%-(-W6uoR9V^TeJCHjmw91#S_4R-q(QN2<8E|m$4Fd<KbG)3;*w!{$
z#OG}B7qgQ@d2jujHwz07q@*)C{855Nx9GoM;BJ<xjVJCYS86gP8NSbT85)c4TauOg
z8W|sNZ#{4a1(tRhJG+wJt&Y1Zm>0nBac+L+eHKH+(jcBA^z(n9lu$DSz8cB0Dmv+}
zsEbjB*3tHE$boJft2cIUT*1RZB(I<-;w7i}&uf+85U5bM40$=zrLa=_QD6NYKL~zt
zUaQ&?r6|MRwWxW|ku6J{PZ#}pp3oaPI$72gm7d-BG923&|JY^!+igKsotW?PPjpT2
z#Yaa+ArS(3TZ6(WaC}^AR9-4?kW88J=54?wAa0RG5ZqT_I)q3GRr-d4C$}MbDljAC
zzI*12dJsK`LDh4F=p69w@@OL<_9`(YWf1@bWYRT6<sjtyzNWarpp1cq)d}{Hg!i6L
zOVzmlI^X;2yeIuRAwj+9D^Hgb6B}DQpka7~glZZFP#OnIbYHOPRDEhm*;<?LUUC*c
zqq|engX%BWBnN>edK`D@e~ocal6z1BaS1^|2uK$&HZl2dr#v2z8mJzj_*Aif|4zjP
zuNvEwzgpoC0x)(Js_xKth<ga96kgkG_jbp?!y}27M~-N$!hH7A&ET3`-{xe)_VPNH
zL0^Uq*?^NBw<n2pq21ov+WN)=#>vi@x;oZiQWaTQjNS9WoR8sSpteFXByf;-Qg;@l
zzW_|5tf_h23Pt}}a8_>a10oWVd&M}fGai13Ri2h{r+Ve+NZk)o0na=}PR=-Yn%S`-
zAuE+j={Msdgk)rspVIuB6$3@o)YNDNVj=yjai1nhjvEXL3@K3|9c_NH9!p6bsNcrN
z`vQIQaDU*xK_+}19Q<PWSYWsD&6B6c$nGN;Hv>g%nP4vADD!&fsg|rEBXilc1=vbQ
z5~~y3h$M9`kV6RqOE_u)lg;pofj?GKTpR@%GNL4^KWcP6TVaMx!mh()>GmIo41`za
zI?R4Y+FTIXb#>q>i~ucLlEFgCj}X$^V#C73*EV=a0(T)38xcjqPK1E~6H`l1#08TF
zM5zR2JU|}A{tj%7l%J_4Cnl`=4_y~P2=HJ7M$6ngq(^&u4{rQQ%rys(P%vVy&Pj<7
z)&KqRBq-l_nHwSSI*|MElPB6$*H9c=D2mwQ$k|;S05>7*=c&e2<&%QktxwLQfQAjd
zs(t^S>;V)N=G=>=<r$l?avBcBbpNaxwY)TEF2w%=k^fKi9-e`L;{jeiF7`SyC?+Vl
zM2{0r#1H^pT>xYs5p{{Eet@!t$Hsy}-|yvRUe54PGTcLV#+Q~bJBl|pdk%xnB3G7H
zR@$bfbhi)a85nq<I8gZ<s04*IE2i<{f_Q>)j9yI#5=+;EpHNd1C@OMv4>-*5_`qMl
zWM%u9eG?^iQ9aQAY3#<WJ~;vsUIK7{j<GoNnsn-crJUKgfM`YKrHxJ4&Q5@W;@f5M
zk+obW|09<-F)CW_kWZEASwPFF<VHTMN0pJ4HMQa5x}90aT~()5HydL{kHDctXc-uM
zwh$&lU?`{ZNN?(V{=y@D6LNkJ?C*+*+$VDxnfA$TXuttFsC8%F1l?ZY`EvpS0>}mu
z!|^H`E&co%3rN!NaQ;x>ldF2QXjA%JwoqJN5sv+7OVrgDtfV`-dv$p%17BVBImHLY
zAf!SA_#~-2MUSJa(F?+2o`hlF&8^;wadmVg+IT`R^>n=}hC*EDxxx>CPDei<-{LmO
zP9tX?2Ds{F*~yfNS2ih$OF++k!7J6nh|b4^YrdsZjPCo(F2K5*tPU1HzLTx3t%|DZ
z^v5bVstpS!D#p%Z#w-fRu~}zgX3j|(#bF|%_^5g$o|X8iip)I|t*vU{lH2d9{+^+C
zxr~`P=}izdwAa{8X}AKbLURF>=09O7Yt~QeC!e;hRGB_)-3-~|mqbS}Cw7rON)D*J
zXVkjaE|sJB@p+_9th8nxsw)Ey8~rp|fXK}=7Q`Nc2nUVpj=u#pin10qMej?;Z_zIz
zt|Krt3Tr!8Z}Xwe`QnD{hu}P1V%RY*a;ou{HYdi9y=9w+Bh;@wp7ty1diTsi4NYcq
zAxGJfiJ7$prsiyAN8HG+T_OAsiP+DdS^lovrGE0{UU_*+LVP?%z1|n+4<8jx`|u!+
zIbN2IB|scfHG@MApE^3mkNwyX8VEAePGX|!tAM$ji-$)VLYX1WXz0xNSyK;V9OSNm
z!IwNI$7irWiK+j`dT;=Qz9Ih(j<zp%RtO~(6xgBsX>2AMlfHZZ9u(K&9?leDdwb3x
z_RVn~*cXD0AV;~IocLP#u2y1?X|Qgx85Aw}4^v!*TbAyQY@SRowPXe&dm|w=k+p9N
z6sVw{yy5NbJ^0P-(hA09&36JWEO6r(YMc}5UK72kf0YFoL$RC~9s=CcpwYW^a<ZsI
zDYWs=S9=V0ihw`WHfKIs@`@x_Zy|CXyWM>ftG<50kR<B1$`kh;Y8n|+81_MdIogMI
z7<UX?42yVURn=n&I@{J@Oo;4!gaG?nixdSUdGcD`Tc!Q}iNcM%t+h3f3s!VKUC&8W
zd;2fJ+En7w2qu={ONn0wi|rgsLSk$$Z-`}N=;P>ctSzdj0m@R*Y!5yfQc+*;x2;~A
z)p=Sq8@K^Jr3Q^RTtR35NK4x?xkOpE^52b{H^~|lfQ2T+wu4DysL7A?XnXdS(m<!^
zUIiOAJS$QUi}daTv|OG11c7sJ?*_70!DhMk{B21I`%Qex;Fci#MTjMXr$hbxS?8Em
zU-E&!gq!+BX+2aW84r(oYf4N6+AS<mbqK+UY~DKG_Tw7YDo~)<Hy$J+V&mYDQBk>F
zzGK!NKF@;E42L-oY$Xi{K`>PZ^7wa`%-@Y(ZY}(cz|}M4@j=F`QOf)GpI?wV*XyZ2
zsR?oVkhi6<wh$w?HC;c#w)8nxr1jnVf$uL@97FHS+G21=F;xj~L&W|61JQ`X9vb2f
zej+5)pgkr4Jhq}mow4yH)#=`tP}yAsfY%So)I{Tn2MrNr&`CS?$Kp?@lxx4ZLkJ%R
zK9!iDJ~=WR+RCbM=deUH++(geXS~wFrm|Dek-C2Q5j#6ET!YQ;LQfO}y1O5RM+*gc
z?32*Ie7yUusE9l|MnOea_cB{l7N??1;=aPX_z!Lf91^{q`1y0MIWw!B2Padv!`PV$
z6aUb<M#o022k8MWsI*n%A+8DQh^kgfpPW2RME!hF<BENV5ivLGhyS6fiinW$r@z$j
zNv7DNM~{-2jGjH?{(kK%jD<aw`7S;x>RU@&RZR{3QCnXAOlR$^Z^T_gZ|T9A$G|B8
zu+yH%JYdusTsRKN4v^F<SLgJKFkjmcWik+Tp3)8S>R@25J@pEO*nVRU78dVfB=Y-d
z`)zr3wWPg0F=?oHSL_wSzqj{n*2dZz2#z)4$X~xq5&jvIGoxX|qu_f2SwpQXvd)19
z3_L8}N~}fN%R*R5;~&mu+{$(C+QDud3$Zsz?Lx+Te?3u}v$MroD373$)=phmTX%$K
z$g40VJ|$;C$mR%jj=$$Bdo<s&hvn#<fk8d+i0fgp1Pf2+s03xoJ}Hi)v5}n$qjIOL
zyQ2`ZdM8&*(~bFi{w9b_<7VNqa8|Q;<y^7CbVBy4r@@5<Q#!FvJ?Z1ZC1?+7dBxRH
z;sW0bw1_gQ-3-vgX?9fh517xdeXc*_e$%<00y_H1*?OspzWzuyKJ3J5YC%xBfFsT+
zE{+~g|B^n){3Aa<f9G)1A8xBasCbR3srMkpbbe`x-ulfa%BRZ8Tp&XZhVx?>l!%i4
zsRKwMFW-iYIp5d_hAp))7)xJIj|)sxVEb%?L70BEU_D3ul)CV>jhPuHEv;1$KBJu5
znsHG|636GFB8}V_xh4SEV4fN~H)HFo;NmXqD^gW|o}-+dpHJdk-=Ht5SNOZ}p&z8G
zK|nn%)H`^pV$}qYWC@anhE!I*&9-M+V207RHz{l3L!1cR#$7foe}%Lw2*i2M)KZrF
zVBSgyv>%>%9X&nIj8c-44#$6W0HwBbx?+Rz4e(MEaMZzFL~Y<a)8L_YcwDGffPvBs
zVJ4q%Ab3Piwr87~6jB28I2aASSY~E_#I}1`ZI@b6;oNEq_QDjuC7&X0z`vo|XEAi;
zFspvTO^qgUD=sV)_w*bQ4g57WCZb+{c7EOlUe9b79uUHmJdmI46k%k9`_i0@Ze~))
z`FjC}=24ltrY6=_BWz{7mhTYpX=za~Gv>g|=nnEqf;)F|D;*x;AZ2r{U=aZ6{q2h{
z%1m5vsD-<y=R!&COe-8z0O@ksuQ&$5;sgdj6dIa88v7Ar5-AweFkSjW?n^WzsTcOc
z6({Afrh`}=xoI_?u38{^?$P<$4ItpOFnkwlWmVNT&0Da4AP)moUj{pT;g#=R4<lwR
z@KrYukT5OD@V0QP2k=FRVw8bZI$x1q8Vwr@>pfd@S{A3C{|AqS4?hdc5(W?@!uC~v
z8=sy3`-xXI^8c=DL_vg*p99Ia;Bu^XpMGz{#nXW~B?x;@y9i3QeWL^9r8Jj3XQ0LN
zsjjIRW95kW=u&&@g{EffuV0A->^p~t9l*ct0yR1mJ9d-bPvi{&0tcTee0+Q#qGuH=
z+gBDxQ0C{+(5>8mfdD28cu}g>nVHx!Hy0Oi&oh05OJKlzST*3=P}j4YU-0%Yzdohw
z*Dr|y?vEZvdzO9QQd3V&e(fJjv0B;Nv(#BwZauP#_{zb_84@DxBRnxVxlSAw5|T8t
z**fSW@$C6?Iu3n-IN!^gIfhMKa9~AI`x~-WaP0M^T;Bz~mr5ETiu&Ch)tZEZgQ_qr
zHIC9z)l4g`@&yIJ;Bmoh5mZp%_Mx>&EaPMfo0F{-xk}g7$+Mh){%p;@=%1SDBUyL1
zsQCZz^%g)?|K0lNMkECR0YN}O0SQ4sK^jy_K)M@L1O%kJTLnQ-LTTylX49b}-QC^Y
zaMym%J#)`J_s;*FapoQU5&IkKv(~eo$mus&c>ntKpt-%8_Cwc<8j<&?0bNPy!^|hf
z)kD&bAA5puJ3&R9OR@C*zUSXVK#{N^MFw0_r$>yz8un{bd;8gQ{oGq6%<g}>x<DSs
ziH)C2=Hh5)_d;Ws78uB>r0)#oZ7Q?arBjtuFRZBo9m-^5rW^f($T?_rjBeuL{g<5-
z2tRHIyFyc#I<ctgo)B|-E*AXYy8jDjyQFJgB!AxorxF>o?tT^I#rK(W+QuVzqvq52
zp3kG=0f_G=)>Ee|`MsZcS-g0Ki@@W(J?(^v8{by>0@LVoB<U7Y?t&F<F6Izx>dXB3
zdrN3IP4#`Rd<ZG2sj&KmodTP=o_{a6_g^tshKBcMXY(?|F6=%bnK5?0e^a(Uk}gDt
zt^uSs#3-{fCK5kvpJ?9xCZ)@*wKX7jAVB_lkDXoKO6#NWiCP*ArJ?{u;6v*Z;p77-
zAQ(x4FIW1lMl)8{#LXrJBcs$TbI{en01qAp(4(mmYai^hFgC0jC5Ix!R8>iLY{H<?
zi;iw=ZoUrTi7pX^P`_4<N_!IkxssKYEl!~73kMK2(#RSHUm*Wqo1C1C7IY3@6)#j_
z5r^WoOlyun*>C~2NK6w5L0N;jp2?n99Euw(z^peIDm7CFxrc-uKfmM6+a=zBC$yze
zv#_vyO-PW(z86ByNd-Qh^+4jrE=NJC7f6dShnoFf85Uchu%RKqGoxAZPW%$6CK{gV
zVv384HwT#jn-F<Usil!#DJ4_w3w{q-{}vZd-9PRh9SyBW=&~w}l*5*&<ntrbWOeq5
zIdjmLfsKO7B2)!~;Q~hOTpfK^i%dAG3k#ovtP3dr>9*@Pa8^*BWxmZZ-@c)%54jLY
zSiH!TU4Z`8uj0q62Tfn^$#ZEVA;|;{8aFHj#*(LRe-q-}d3+sKV}OfXYKfx(spB&g
z?57&>KYsjhIv7w_UF`0jB!6m7{z6ogh>$SR{uNk&gAS|ii)yx7=_z^l*Z&l}JJ1G7
zVk55AgNcU9H7{@%1KtxE<?@q!BDe|oJ2N(8WgFm_Dvw9e2K+l5v}ds20X=XMIOBPH
zqlsztw`eOXDFL4|<#FhpCzt@U15`C{T1CdL=aOOllK6mY1@5reRv)Fd*|^CcS7kM|
z+xI#N5OMq`K{wTzRpkE%r1}5X(EWr;caNVRWd4RM)ddBYY>yBX<|AubeTPgtJ(4sy
zgEp`lG@WQy(bB?|Y&%7FI?xT=n(cL2+m?}*2EPYd!HazjU}ye3-uS{3X$VL!z)-*9
z@*^tkRs=B#JaB<Q&r%I`6*Fu3B9@WI4_?s@9WTz$Pxq$oS)>Vq*#)Q3-&c*B$2;H}
zc#)+yV-<Vt)2Ap{aVh&Dv$LzE5rl+!d?COa27x0vtH{EFQ9*IGK2NT2{Kq6df~>r(
ztow&|z#2;U>4n@Fbx<oTbBMm{n)Ta1e=e*jKREc*rDbMuF|SV+7XJ1C(ch<&2hQ&Y
z_Jl8A*v>Bmpf8t$rG|G*O!c&a3oNBdOpA9Qd9ft(X+%N--S08Ssa%V)<2*gt=7H=_
zh}A=H$Ms>Hy8@>TW7X(_Ldeoh4DgzG0M76#u7!KMHrGFJwY}7>sH!4*2iC+&y%h#2
z!e=C0O+57e{us^FSO=G9yk%IQliK_Q>FITzzkEsXGF1tt3gRxZu&{aREa=>)uP(P3
zV1?u8Xp=KpZV8yV-R?Z+bu33;e{tlq4UmC?*R(41Ouf=iXjfgRRxk3AN9Fn+ClQ2*
z?=R_53kx__KR@?<>AeH~f4{1#s-PMo^ZM5cICDv1N44D4dp}WuTA!63kDe7heyN^=
zwY~rrEDVot*XiZ9d=li-2=LDQslwFGC3`#6m}Ht9gO@q<y~O8crJJfYO`q0Rf@z*b
z__VcLyE)eDOft~_X--q>&UH<6U2`WdLxl!3DuV4`Z{qD|zX=c^;}yGay028Vz<U#(
zKibFXBuBQ^*3W@ddY$+PcGk#8A#?Q{cmM~25fqd;z$p*`hSaO{WT}L)@Nz<D_x1aC
zF>DGZ@$+USV88VCJ|1WWnLZ!~jV&$WOMlR0r34V)BO;zdN6^a>Aq|FnI6#AV@lgTq
z!Gj0j^Kq}42;M41Rn?Q<vVS8^pqKXnxxsx%iGi&?gUSerqSR-HcO5_3jtL<J?u)v<
zE}lPj(g3WCpSx!SwSGjo(sZlS@I2D1c^O@8w{i^u)~Xzab!I~!2Bu)GE@@$LvBCsu
zKaR(bVJ;=c7J)Dm0{71nw%<T@70vA*WtX%i<)8Z{jTgpumxUx~cK9bi7lyMQ@1|74
zt8ZmhAjjjl6;31D--6Kg1=$7mW(#nLU3B3a`B*`kFw6V(weiYg4}v~c8J$&=&xub{
zzwnS84rI^IUIS%`Z<j9x0P(ls^=kskZzx34QUJ#i>|m<Y4F6u8FNyqWLV{Jf@YVSZ
z7*Nrnuz}px(8rn-0hr|EyH;<2Ck#PFi<&>}?6^R+BhhlD^$|#|^YdS6SYfoxboroJ
z<5XB5nj{|vT+x1VTVK5RE}-UPw`QVzoWYVeGV*|N1lYVmR<`TI){U^%vC2Jys(Hx8
zXYtoq&V9>58dMj1-3xt6|5@1}W_<1fzoW-=qbC{bF75wu;v|vwHOaHZBOtKc;W80$
zJ5g+eABZ~chp+a!?&WTB4@L3uuR1PQeEA}qJ+I7s=?D`a*eys|neet39m7R2NjIYd
zsrDBRV1K^pj3vXP?&?jogwCV7r$RgC=g;>}u4jbmbsp$3Bx(*0k&&GBTFLoeU#RBg
z#bb8B2gUFk861>jzlx0PD33}9<E1xleV%onYh8K9aN#*K(A;sgxl2VwX~Dy$I^^tp
zgk21i%d1zf#D^ksb8|nQN$wru=vwR7x)BLDUi!mwdk%S|*A_;1g*|?9hJ}5&Q}VR3
za{dw~6uOtGy|+JAS5;9A<uS|xKNiGK2TohaAz-Jm!#cvpfrgMU<tgTO+(S{AgVspP
zzY#NctLy1Kuu86E*EWyAKo~DA5<h@NB*Q=ONpT76=_VhhhLLldiob*a6zb%_6M!ZJ
zHn8;(4-1c1(k-vM!-<bF+H?dd_A`jEe*5?i$PBm7wnXUI*ji{;W_WK_J6y1tGywrA
zDZ<F0|Hw9M)>@~!a|ldf6j9tjkOq^YK;Da0?J{%IA!pV6hX?%q<Jpo)3e@Z=CD=>=
zyv1X56(F3paWN%s5r4N~4Ke;(u#-m>Ve{<owH$A~ubk5jXiQjEb+^BYIC+^!5k12|
z;9z-W7GoE@>uCz{|KTTEh{u$-fQD&Mu_zOzM4p>@&E#(&py0N4>%(ZELcJ#PH%c0c
zUgIZX4Wjzw|K<WP!aQ+}jxHH<P7(L=M>P2xSQ3IMA|b3Op!T4oeqhl+3sDDaILfDs
zQAV06X_E~w`hc%gC^R8HbG(3mDJ~?k=EJlKE0Uy|8Y-Yp!X<=7#quN)>lX1h*zaOQ
z8mSuPuu&Zp^^zJ-$RybSjq$~UZ_i=DzT^zsXE5T$0voxk67EO>qo07!&8)4-_~}DY
zgDqJEc5>CTUwKdKi*lGag*Z*kZ+<t0Gq!QDL%RTwvn=I*qhmowWv}3XuRU3$^#1re
z#<KQPMuv%^p^B<%12~i$4NAWK2kjobarEn4;?C4q;M(j9_M932P=-fEMK7Wr#eE9g
z>hD)+oC0T?9uUq(I1d*j`Sf8!YQ(79CG0Ce5192BrSAp92?$>pS}E7B^I$s+A5kzN
zUeYdli-R)wR&;M|Z<k50eyE;@y&lQ#Neq3-zzU3wwV;gfm2-qOj9=AcO3_4QM8qc+
zEHg8+*F7)o?Mv0}@p1yW{3GuS28sv8VKdK!Y%DA*YXvjzk7vPYgvO$8reI<EAHL}4
zw#mtxpp+C7gdfuku5JiKh5bWK4l+O)aUC{E99cRSJ3L>5*BOhgxHty<rBnA)zl-<B
z+cV&5lbBHe>p`4CNw7oz@ndBElJL%*Pv9a7s?d1eTosxg7FjUt=QL~-16@EQAt~|R
z^9qJcVziWBp1BPGBY&(6RbgoXEB!)nKMkgm!Yv~uBMYjcSrK(`xM_VWi@ZnG9?VJ&
z-fLYMRs#G)o2a9$9RwE*aw#L0*M4rw#S1bs#i;A&l09Fa6uJ(ia<Qv<XKFAr@W^<~
z^ytw8xs)}S>rLul&%^B$V-jMW%nixc{{GEKW-cxjhLpS@KnD66y#N380RP?BalM4Z
z7DGt-Xeu(wFCW(WZPczuHZ1ghjbkY9LaE?s{2VVhCP-wTRXg^568#6u8#rNUd8srg
z!4Tep)cd~ujtB#=?Zm+bxKOQUYKjInKg}r0n1KGnZ$Diq8Re;43JmE~9e`DS4Picc
z9`k$_Hmep+PG4W>!9R+>U)^}Bdi!XL>{-$@ZCL-&UHz$>vbgO%J&FcVKb)gD$Vld!
zMk+lvYC}Ww^{k^~w4br$l7(mI<%wHZlxiIxfr(|}W5~8>05dVzW%D;3?yNlfE^7O|
zG)U%x-voSr;cF7%>HU6nG<oJnScytKN|O~SkMRI`4Qydz_$Qz%CtgS~=lNM8rn|Hd
zc7_Jy%5u*fm{r{*I!X!qbr=A=qi!r<loB)E6uplIi$$69MX<*{Kd*V(7te(;g-8^|
z5>d3kL(t#)WT0EKSbMz?jF_66A0BU3vlrSiS7HIx6rJaTj_MEYBa4Ie5lXC^AIH=g
zBBY6^#(xy_sWBdHE!{XT%(+gL-hHRG%z9kG1oyo(J*$szHHbd5A;>9uhxLW%S=K*N
z(um{jriG0vAq6~n^L32oRz1RnvW$#wgT2~--<_S1`y&W)Il1wCAlH5dmQ@e#6T-(o
zULBO5?y0+yA+CFY#>C)XbkF;vFVxWjQ6$4r?F+nC(+Li7@&{E)`Jx9^sR~S?G^}jb
za2Iy`vFg#Lop9=lGa`2?l<EzYKU4WX_L^H0JNy2@89~+MMWz!w-Rneky-BKmw-v$e
z{i-1;a<0MKl<z=<dvzBtT84bTEFv)q9}zF^ujAuGanmMGj_IrA>mP$n8M*<Y%oHe7
zTBx7EK$K1mNr3DDc%1ITOaW9I5CK1iBs|I*l)KdN@pWMSk*KN;WED(|j{`)6vOWsB
zl|sBns1Gj>2=`||MhreW@zNynuZI6}0o#C<hbM}V><u|47{|UaF<}Bc8Q7rM4FVRk
zj`%p&-?wJESzBLupk-xcsnls|YlHKB5A<O^kd4!3jjt!z1<5n@5FiYr*R`aQv!g9w
z2>E1a>#iu(x@Dck^f{LX94ELSNl8h;t+5!E&|WOEulHn#+Q3oE8=Nj1<yazKgE8~3
z^8^vkc#g5*VFRH3|2ogpI$%!XAV2`yFjV(0m@%kycL9q=z6N{nkmz!`#}j8SLopdr
z5?&5NUsc_)B*H9p{Me!6XP4N?#bQkUn65h`J+^-eu=<@9Z!m$<kzx7CDAWZBDIDk7
zA7E`A51wOj9$+Zrd4Ft!sDTRfA?)H&O+TKbTVJ{buZ|*J)xWjd?aaa+8GsqpEi0f$
zSf4$ud|3}HXb=Ys@g0KQ<!i8c`8DgjQ95+}sPOmiQ*lKw2Z%Cw1y5jTvrtMgD<=N^
zwym6;(>^pfMirHnMb9rG;2`KxGB`mB{F;Q__ot~huYZAqKx$QIoWR4Z@vTV)G8j^a
zJk9mXKd=$K1K>*0RLK6bTP1timI5__$MKBha~jtf|D_(l2pUYwV0wP+bWTKMj9m;%
z%0X)h%ELnka1diSof)$<Bcu5e@}MOaSc2RA%JM`G&}=gNgYLJvI0&u+*l<3p_|w^W
zn}KPFe0A=Y0;9s!ZhMf}{1i15&YqP#wqVL!Ys+3L87TKVfGw{CH$iI%sVFJFkcRQ!
zWfG3+|IheqO44C(+8)U!3ZBBnZPhULYLuDZF)RnUy=0mW!z~<?B|xqjlJ5R}3c<vS
zRn-~(^DYs6Iu<$iL3he<*s+U$1er5rS%LP@-FpmTO#^u=VtZYvgxwHQQlI>Q$&1`h
zxMB?ql@ELnxCYoC5a`KJU*qBNJcczWJp6v6xuM}FY9W`kyK)8w>fXB2xRrYQgSl&d
zBRxGh(8B*}<l*K9Z{%zUlgw5bnr>*q=7G$EYo2qhp9C^o!HKa$s}t-|jwk~RA;6nN
z(L+~P7iUN08B^Zy;19u*JBph?3uhdTvDu0*(9`~vXE|Q+KqGmo?uvGH+I7QX0Iw-9
zNWcKecji}K4obCIfmvw#hVFcDbBnF-gg8mr()7=tZ5o8{7h1d;QR{Eth;#fc^b!nG
z@fAP(^!Ydn<G#v<nfhxpnMkm&kn$V(`<Egq=|U{k`FOkMn&KZgcCK&Q*!sICtLH1k
z&45Rp+;<ZrWvQ1H_m|~guLT>DLxj1^T>MWI8-8JD`ga(*&*2?vVQh$`DzU=zb2$mW
z=C$jPP!48$&!R!i!eP7kgu?cp3`^YS!_O|dnL|nMrr<7zlBpoRzHkl>+YwAOsJFt?
zpsrADG}I5E8j>b4h+zNXgo#J6Em*%tKsVUpGo!&VZP;w{l|xWV`78*F@HL&dzV_|B
zR@~owiHWzFG8P){h%x1!JXr$gOrTIh^B3_|4^lpQdpCa-72SeG1~)f1e?Dq?3WkMz
zd<XXl|Fg9?5Qh${Veect0Xvn%2jy@BOmiUN!Ww}J?C@`=K^+6lF&*7qpsUa|ZbHT=
znB)0FsiBq^KB4#V^@TkL26&7Ece4><NuixaMU6tVq@bW6ZP-h@a;->z!0#j^9-w&B
zJDM6A)0ye<&EU8Py%aV$4&MOL4A3Zj^YhtJi`l|Al6GKG0OC-T*EY<!{;*nr%pK7P
z8U$)@a&hL*-?B{}00C>jUl#@21P(A20wEtMz%5|UGnx-*{mc*J_y#D<sJHpK23zlt
z6E#R?R#sL}V^vtJTMVIT3VDcT@jIT%S0F{X>pcOTDR7O-B`)ki8Vmyi?H1ePJ7D%~
z8MFY_IC>WI-rC+dth@d@5A$nY?U%xfeB&If=D%<dP;h<Z9SNA@1wgW>qr47giX@0y
zD!74z(*T$#<pHo01;Hw;wE9v_Ljy%cZ0v-N7Zg*Oox)FG>C?00c9LqP*d8i!>17<>
zbEyQVCbgns82Gf2kzPVZhxG;j$&NXQBT#gk701<nW}g;vm>AxVvW6M;<m-zxXcXBR
z_g%+;$k^ig4-Gz1Vqe^$6hhuJ_vH&ddiv|&kuPWn(^kmwv5Vnvu*(AE@OiSw`gW(l
z*7B<>KuK?0&*p0TtnbMnKMsCo4aHrnmrQFjGv2_XC3g7v;v=-jwEs|^$k5$(7I4dZ
zDv@CYefo6I<C}D9vneZn(n*hsZh!Eu6QFrO(fHH%2g1w>*TIOhUf<owDQU!hZScmX
zD@q5n;J8s$>a&!MBC=<XL5qfciZZ`YSp;Y$_gWJ?W{j<1)04p9Ap#^>QIyZIKF+!x
zgqwgND;NKy<!Fgi|DKUqC}pm_B}C`2Uw44G&VD}jsRBdM;z!Tmto{EM&i|*VhGHtG
zy(0aHfK_s`rZ}RhsR?7&6H(x>Q6>57m9Nh=A{tK&SW6O~tEsB`pX}+s@7{t)r|Yko
zfukV~2ARp$D87-Ey}d=m`O^|hu=->JqB8AziW2kX<r(|v&L}oYMYJ(CU!}~>Zpo@w
zgZJ%$5IQ5{&g(D0wn6bBQGW-~Ct4H#qB(*8U}%v?1-XeB4qbwKRO{=_H%RgC?9$gD
z-Lb2ojy?ATDDffTE+8Wz8N9&t$NS_rfX(j1p<m;qM`&FB;okPPiCco4#_%&<0RbK}
zKE?;F&@jXntW8vhc9uw`DuIpF=Xw|)e>)6JQQeK}&Q?#5m_V6Vf;ou~CuB0dm@Z>j
ztpfH94o(VryjbJxM!AT&LdBnffx95$4qLYW*D=CaRP^||$LZnS#3wpnv+N!Bv_TwU
zpedDIn)#;fCeEnF%a`(Tm#l2L*EiNzRh0<KN=l+R%szLS`WliqP;a;%6=CnqG`V72
zwuUC)g4<Huh4JsNGk$SE&)J!i6dM@$Nc82#ASh5?*Lx*(Xz4><>r3hTOX6i^4lwpc
z%heSdi?A;%|9oTMYEID66AJlAojZX>4A3|Y{_r3s?z_F#wK{9G>iUTW%v&*FjC{m2
z1tL{Jm5QIPc{IlTN5wyW{>+F#QrY9OY(RRG3M{Q|IjmlDMr=c5Yv~@vJV4q1nf_m*
zrvD5Ct^Y2$GQ$$YVZU^y=2K<uyv@O@UH`ll{Z^V>qg?0SSIU<uL0I*>UU%qxlW}N`
z5FD`8NI(3#J?-gAce^Q;9=mYH5HC@yfiBrcvh<gQym^F=GjNPiVI7cGfXEO-fM`9~
z=bCl;9Fs@|JhZUcgq$C=g#}U;S1>V0$%res#ZE0JYy45lNsx-V;2>CF%@72l8`u?R
zi=m||F~eU&0_{5#Kmc@C23C+F-MGzKFT>v9X@&H|xS`hw4jmk?n_mKKt2$oQybNhU
zVe#>Kw;qGH8Hyc0UTMqW>ES+Xf5om)t=9;OeIO~h2_B6XgFxF?g$1L{8jN*;-weaG
zB(PIDZ4^EqqU!i3#`yXh?1G_W`msmTE{bd1mU<Ig(8fU1yQOAY{MSuYP3``pM>nB>
zqUay6O~r(@s6VWk&BLcaWZw{|2E+x}1-yY5LF)pwX*oWcO1_2`g|hT!Vq>#7e46?e
zVjZB+n-SX+-jVve0tOMc7Imxrd^o{>3(z27llhOqSUlEpBNGaU`6Mez*+|WaJjk*>
ztBFjx?cu}pKj$#EH0fqrS-%MyA;?pRDaEDih!>&+x_OU`%F&R%r?`|9&IzKe2)qi|
zfF2XbAQK6ue>@PU9RQV@2pCTo8**fp$b-mf58KUgO*|Umn&%>LSK5a3zximv;R0Q+
z>$kr)5Dapyp&AMjSLFsYE{f9-AGhff<qnBvFJIA%C_(ba>}<;o)RMR)K*)Ml48m>X
z6+%b-_)9-sAWv6cL!H<Cs-GxFYXz)5a$c)MgYmPu&@X-yKe^3HK8EJDYFn~d7U)1G
zkoDp})90hyEomWl1s<6Y!<hb|<R6@XY~*#XU$6ROK!RJIJ)X%c^B!1zziA7nnE(OU
z4P5a*pb^C$UHwf&hf@vX0&1Tw_yKIcWn*6UC_@H{POV#}qTv{-Z+!ViS{fI+tI{eF
z`_=CTg34QF0GSM~ZY?YBHkCmjt>K5Pk8%9K+GF$+_O2p$55RB#={h9ygu)|=vhA}w
z&gJ`1GKgFOC&p`GhH$^dBqedK<DjA7SL4puR**+6CxW8r|5UWal4PAMM~a4G*n}+%
zfs&m&5t#tX2~^q%cuCGBc-{nWA!45<vj|p=g0I8uiBg)HcfbUWy#UN>uok-#*bBfg
zv+in#auQ5|o@zdYhcp0o;_E&>J{)j7L(xX0rZPZt@C9P$NzQLm3lp|Sd3r(lZ-M@G
z8rtB+#RIJ7m>BK)wsdqLL<OM!3DiKef^LbOykozxr&s#gfTJ!oEJe>6$*%7WM8J^@
zj<Cu~3>XJO(i7t8kJ%nbI6dQOvj&?N{l-q%X~PMK2HA9!!N&8y3zx^DNZ!fH*F7Zc
z|MurS5vjezwCA7j1+A7PNJNAc4~O&a6E>wmz{^RS>)!sc!J|6%Q#+EA>vY;Eb%Y!}
z$>F7i3F3LA5OkZi<a|oigg@#$X(QRM@}G4-5*EG<Yp82Sfb+sUNwPixTEu2bOE)iO
z<#&*W&Ip-AL=>Y0#qWdy;bo9y-^p5BCx%o3*jD((prK<n4VAy~oq3GsYd!bC?0e~}
z0v?;c-+urVS7<QjgaV%Sd#!Dev+E;$KCbJreC%Aq3H|MA#c^@G&o_yrrS2UufGs<0
zI~BjA8TV(TH*loz*8`fzwJDH#O#mJVFePGy%+Y>|4_lM&kQIsh{3mz|1&)rs_deU*
zef+!<POG_-B{J;mE31nPy4#0iG`NkHH!r~^0mXv*6aB<Ee$W-AJ$cvRLOoIa&Bs-+
zYwmAE`$nx06pWdJp{bUi-1=`0R`cyXr#uaSyK<ZLm;fBILI<+z8X;khneYS}T|noX
zz}3F+{Qy7c(HIK~3rYRBt!M2ZkA?c7y2mHLm}<nu%DC6^a(_9C5N6-7I{Lu!VX{VU
z7{>Ty$1RUg)e~+qAg!rl;x(a`oVn)n8^WIOW}0r7gI`Omh-Z@Sk~}g5K=yi$oGe|l
z&qB%oGT&hS5AKm#5-DoW=KKDRZ}geqC9;h!|0jAo$Mi9OLoEwmqLaqNJ!+N(p@26A
zxU}`3TMlmVy(h^{X1M#_I2i3v!iqc67d_C1FEqwz-S^K2-Jd6ce;?=XJx^z5!q|ge
z9OiliYB|p|0it<SS|+$=L?p&V^WF*YhW`BRTl&+(jT@9PRb)n>X#s>-03J<XNT%6j
zv+2K{RZJ@eof5p>%>Xh_L(2~csTEcFDKe=@X_S<NgqDScVxl?$MP)Yx&+1zXd;9x-
z>FJC!^2|kvB;BwCN{w6GS~ZmeQ5U3G&MYlq0kt2DegX_p3M@G8?#H(7=4t9d!~+Pp
z3R$>qIA7nwUr?r$PHKPzNS!J>#eQEWTiiWWb@ex39)cp(W8z^4LZd)LLyF<%1QV@L
zFy)b*FHI=r+(MLo17MNZM7Ll$alYG*NkT$04V!H^RD8dEBR)UpZyZ!RF3Qfxcu7ld
zWCBpkM*?(Uv{$$b+<^^N7S<FL7LbA0wzPXfTqr7DVsHwj=3N_P%dKNzU@#@MLxaG)
z;*GQm$opc1C-7!Z0KBQ-gAs&sFGc;VN6Z0%)mX40#GYvd0y#LHf*JCp=aoC;2AmO)
zw(?B51%W99-m^IDZgA0=0biGjJN$M`z(bisSy=x4>jR$-YLtPo`W4z^0Re5=$U#Ej
zb#uaZe;C{D7jU18i^R*Jp&Tf4Z~lJ&!{1Z~D>HzpyJ7B$h=cXy(+}t9aML8-&htUt
z1wJmyHWt9H0T+T(h|Yqt`%@*4y_QL*dk1LoLd`N9cVICLZa&E0B<)4fJX<KU-%!6X
zbv?~sIPHiw1_7yoL@!{z3!~0*=%Zk^fpp(TTJpjVfl%goSuAD%qrNOEv<<$3aUBc7
z!$4C9Y@$cdc{ErH!o^2H^;#JB)pL&7;nH7sK3_>s*jddE`gB<aQH|jDc85_ewi(2J
ziV9XV4Gqs>Va?)lw8;>iPtV9WH!E%vQULz#P&TTYd1**UK0Z{RE%3N-0UvZ(``MrH
z*uhm6f<1qqkKNW-xqNQ$XK;#%B+Pis!_x*v*E=x2&ca)-))5HcT!Bf?3ph8P(FPxE
z)wL~m#Q%cmWeafn8qmVvjxe99MUKqsSMDl9Vp~i_0?4U=eSq5*Leu2GM}`uhK---R
zdxU6iGsq@n!?4{ZeRw&x>?RCBJkPC%0QlrmcsjPTS-tiCLiSM<-Q!*kMuS>-0<P_-
zgJOPttegP8Cn`-0MhJLVre|i7DCR&I0hE{I`<*B**dlVJgD2|Emfr50I=HFO-1?(l
z3DDi)HPu7%79jOm#B1;+uvCB#w2XNEe?Cts=t0v9A*d}yM(rvNK%@W&w-HQ|OL4D1
z^#?B5`go<NK^?d#qex{VyM+Y>&m0^EMg1H01Yva|vu0TF6Ry2$G?(f9!jNb~a<~1S
zKn+;50FN{P_CijsuF0@4ZsxD_@wo=LK-rHX)T05`i3Q-H-00ErnE+sJz41EF1c!RH
zG)UH?<hk_gNp3S7E(r6PLcewm_$k9F1&{#x8N{E^9L5x=|76$w{DIi0eowH>@`|`i
zq|U1#3M4n&@2Mb~&HLX!6nXL<`xZ6*EikQm1UZ&qYvQ4G1SrR3YZx6?X{+PnKWo9A
zX65E8P4MWcIop)hsipD-{n^(aKhR(zadJKZ*HXiR0$^`U)_JB6ZUgcYjD{X?%SR3j
zO&9+yf#B9@92pY;n^*W$4NXl!grAsMSp4GR+>0aZ?d+~MHe%Mdv_!ld^TSczng5my
z-#H{F$1eJ(78r_APEHE@aFF2M1SRjA>Q!UFW3p^KRx^8+`xx;+mPX6SNU5eaxIElL
zgOXd1EqbHl)9g>)ve$)eTSkU0Ifs{Etj>MI9st7jxAHH#ZTx*8YSd_dJyW|oo9_(F
z^ISQMJ8y`c)ST~{RXA~CLR$uX_l)oPOIV=zK@WllAN+nWd}JJ30|R4lrGI90xVPqK
zoZwCb(scWvvWFqc5LJc_H1DEBk%JZDfaYeWl+;vMWn2Sr3p@$fVK;!=ngbm@{JJq9
zB6ebj_foXtuF$FJ@riw7Px2X%w(>^lHda>y!0;i-cIktUgXfh;E$sv>WBrZVC+S9$
zVNK<Ok^d_r12$YM896y#rKR}5Oo6OYI_%_>6!NgJbPCoO@JBKPg0i13#Bpr{mS}x;
zC<}&gz&=E)t-bqc2Wok41Ck;DY{0GosD%l^)c4lmH~Z8XSAAbVfY@;>&3lQ|%Gz2o
zUGBM-KMpkL$<Ii#gvtVcJW23JB7L*)|HYnAZBEMejefA(X(n!(LG5)wgk{j5Vckql
zajTbjqIzg+3V2dY`zyAEhE3%x0t5u?c;p-!8+`RtT|(sukf!$MT!81==VfAx2$(?J
z4mJD!zV3?O=+N>A6&M&$&APCIsV@r|Z&R7m<L<EGjZf*(0>C{*w5V9gS=G1pH4N5)
z(px6gX$nmL1qd>Sp_AfLmp>%o)kV;M|J{JDuq{YW5Z}(iM{QFpR~HH{_=3rff_MlV
zf`aLKTPlrsNgB$VjJ6uzz05Sxo?%*XzvJvs_6bqLWzx7wg+9LIr1Q{~mZS}xAlo_P
zU;kCH<C3*Qzy0Obl&XECaJu|fTuPs&<_p^EB+t3L9^&#Y{~kw+BciIj`GlXJV8?jT
zalre>bMYT{G$pLjNE92;uJc5CVJZwF-g(nsFCyfZN<TVSmr-@!qM2~-WkjY3tkB=x
zbrGgs>PcViKh3lp$mDllbq@$c%8J*Ic4O?}Fvcd%g$T&CM!z2JL{%NA6|+*OVxlJj
zHQS9rtINyXFoPP6mHq0;2obsDjdR=m<1*t<_Eu9(>e<BG7nnzG861SML*q5tp2tlz
zcCB|ThrpXm9S<=+RCF`<YAwGmkLK#w0mK(;C4G}wki9(Hvf2H3v`p76xU8nBiBV_h
zF3}5KxA?fYIIY52A{bLw8gE>^07W7o?vGo)_rG<Do}Mf%WR)qiXx|fL_$I~8!?Sic
z=J^Y{V|TIbDGjubq8E%x`7`ZXXSHru^+zRzqkCfIahwv>4%}<;uA76fhPD68EMqiw
zSkVv~O*M675Al?1-dNPp`xRs5mO~h1I*F1r?sj5U((djT!dJ||96I<UujA4^WDSs#
z%bOxk<NxLYtZ7g2&kpmN4aO6U8UKs6)>yp)yWGF_6R)w`ClBtne<lqLzJoY!*PnE4
zE~#@9&d>L}SUYXyspXt)n*RCoC+85*ufBkkhJyQ<d6i~O#XikQ!rA!JLANMD$gpwa
zOo5#6$y?NArb~ka3;T-$&|I$a{B+%{lw7gX5;<--lEe?B?2zS|Na=_vf5n7Q2!B+w
z-Q;pS6Da)x!LSniL~iJgacmx7qc-C^G%m~cblnf?Hq>RoWZZuC6Jz8)STVSq@3aw^
zXkQ$+m9L#mUFk{H$$RX6qk9nvtLwBI?B@k)IZjT^fiVESc0(+U-QkFF=-4Lw@V)O{
zOOoyv#R(UT{_TzYS2extl727lv1ygOgvIaZ(jgSoF-iB0s<k|2E{Z!lLD7&Q(6<of
zDIKMMnQ5Iq(cAlrz+<~cQU9!wEU&-I<FGH>-5D%Pt2V3F>?Z7oNV`^Aai7(0l#P{m
zT%3k`Bmn*Bpz%gmlpDvLn}PN%r0UC`ALcQ|V+C_}4C#&O;7wl-=yZ+uyu?7R=`IC3
z-*ln%wjg$%a_w@R%myEf9D1vcGK)CR$rHN6v!3(zx^w-Dols9I$LREU7ngsYELW@Q
z$({|##l^~>#9sH)Rsa&uoZYbHd4(l(wq8sZ@-5QH6qR)la5ibvo_iWocM@Zbjv!dF
zp0ldsL4sAN%YM()n$L|+nuA!!W9Ka^xJm@}e;CM!5!i_T@jruvfESkmfry)1!rg@R
zkV4D#dKA4cuF9)ng(abDjplNOrqpJk*`xj`b?DmIRIQ%=<?e5qfc)ItJA2jtpv_Zq
zb*-K}sy&j;KDZj`^2h_RPRV@rN`rv{DxHhp^4e5xbJEUlI)e9mi|Y10;xsgSXYs@X
zqoY|<mxp>5Q?<FnmQ{g>4`6u-tETEl)$4t9wSg3HQOB)=?BLG>u3WMEc{CTxu5W5L
zo#XTBE-6n%u9oy=JYJ1ko5wjXYVz;>D?a24g?l17S~v&ERD7Bjhvi4B`B$fwk~M0&
zy2-1nKNZ`cV+%SxJ%wUmOkKi%R-1lxl5o|(yP%#~Tf489ufdu|EU)tm{yg5~@;IN{
z+EVB3pXnbPOYZD+h_m@ye_;trUY9j(`62Bom(z;5T%D7Q*_~tFE%v~7+E?%cfu^@w
zvnR}zG^0B-K;Y^0O-{sp#4kW3`mDK~J%2#c7^&Sx?dn#TV1)XWjZlAl_u#$J{Fd_S
zL9)QsxwTYXai`1C$C=x#yo=z72#mKE4F)f1P8C*!oW6XqmB5b}*LHP{@i=a}x^tj2
z4_wyXK;iwc@JsZhf-A=a`zNj6{jxTYBI9;__FA>)Swu$`1O5G*Pof`3NQbxvN2I_x
zu0(TOk3r{izr8)#rCnQEbUMJ!&dy{Yi;>_xB9Z=L)A5Lz1UJNF2=3sG+f>C}W&6i-
zp50aU*`ddWgh8q#O;-T|8ztpyg>7oDs`4zI+kelkaJEsY_rf&~6^sNMyZn^1xGgF^
zklsx^pNe|&BN!TZ1}S@cd+GGP*w{@`E(+$%sh&r1of*G=DTR}K5`&BUP>O{FceE{6
zt546-u^ighTs~U~>b4KagEBggF;ZODYly%p^(eW%Jn!T<Ssbrq^+}%5h$xS-4`#Yo
z3dbYU7=zOsQbSDN_TFkMbz8sv6UC;yJ4_~{RL_I!9RH$K^(7ixb_4}o8I?>RJ)%2&
zUPGz5%<jbJ>!jY&L!EadM^9GmzrF7`8SNMO>a|6)9ZNrT48Ku}q;M2Fj=@+$;*<8G
zdFOcZu|YtoN(~yWk>X-h=4Gp}q%y`ky?}T0-?ncd9-EA^@;9KDCw6wqE$lfP6>Ewo
zFYqtL+Dcr%d2$(lV5{rcoR9UY8QKrKvkeh7PtQ8RF3JpLVST(gN;AzboT!UXVVzui
z+`_&J70?@U0<z=d<7aK~{5$ZkPkp(x(p5ik(}VNCW$p`4|G)slkiDdNOwuNBjn)=p
zEC<W$+>v@ND+~umZ9y|ZqI*=-e#MUEoD!KT(qIr<wOM!Np=;eDvJ4A0rN=+0dL9JG
zH|+^7?45*b5nv!T*Emb!<9S>R61ONxaW~@~es;AVA+5*Kw_N`&*f5NlnXpq^)+7~3
zw-=SXZlQCT{nR$l+p9Ew^Te$-C4SfwmNz|H9!J#|6i1~)PuH4gE<d`sxG-{0g6mao
zs*HRO;OK7MLt9X&)4_!Qq?I!HN_0cs^RzE|?tE4KDAf5L%oJ60Sr-@cjE>8_GVFJs
z;8|D#<-Qw(%<bif`R2#*siz;tGaPGee}Dth11`7wVcmR7H8OE=-_Dli&<O++3EZa9
zS65c<I99+-aNo2|7=ml!E~U{cCd|bT%Zh_$V)<96RI@yFCtogiXhe#qxX=F?3qP41
zUy%27+4U;#u=LoA2`6ZxHw8{aGNxbc?%#)}P@ywGY{bYN3WM|t>VttbdE4F1E97~f
z%d|Jv1N(IwU3HO*m9G6%b~YNv3eU50&!M5Z%P$xFlXXi%TX${s-Pa4-_8mQsGKsiZ
zJ-z}z+0hb6VEx=f!RPh~V0{;7+gaV}7J7$Wp&&I?oJ`N@p5-q2O!d^oW^_I*5-rBr
zpS|*5TzrR|ySt?VJ?MO1%bv5Y{eWuK*=F?--@1ljJv<xvV4xB`hurUN|0c{hLKCI4
z%Q@jN)_mn{GiFh~GHR9|v9xhUv1@ggC#}h~FJ0uqRM+zYpE&*yDppYKL9S({f)yXf
z|2QHLi0H4BA1V}i#yNIfrQ4&})n(d0u<2i>O37~J6nFM&8poyTU#wmxKR)jwPu9OW
z9nz{fZpI0`!awPBtWAEHSMj>>$k+mqZWQ~(rt-Wbr)BDLgHggw{{y&URjn7b5AURf
z0lcx&N?Dibx`kAhl^tUg@=)$`m~h>StJ-O`jP$$8)k8`HRVs+6$@6?JYBl&tq-@Lq
z(D>p$RITu*D*d^jnA&p_y4WW^g}Q$#d^F)Cn0IyFW!68yUFiz>r#^6$Gs4StQPCuH
zbzWR`Fc`z=h6mQN#UA^~TYv0tU?Ds6)>h$H;C=@#7D|~Vn-z0vaNSQnj@ND0>^WGB
zJT5fiX<hCVupIguL9k^zELxhYp690FIBuP7Q#mdiN;jl`CA$HWagu^Tv&-EO_t{A8
z+GJSwhMb&gBpFre$W5J19{hbLgYM+wS}lo3iG7^}H{xz&89bArtAI|$?mL0cPgU(+
z+!e(h^(15bF_PM4nde(x45vih`GW3fVY2BzYlxAy>ysVI%(t{T%E{9%mzX+kRef)1
zIkqHh*UmP@HkplN-`KFIT1m5Hj%ue4w{Vzpzsfd_ced$0inzEudbq!wOi;r-D#{;6
zZGS;Yamemhk#0O+_y#<p7$)xCWuprisVugu937RIBpx0Zu<jlcyB{_!W*2@xjOl>#
zofGzJ0Kop7&BruA8yTZGDN}WDx;7SiY)@JHCBRa^hYjsI6PlG>wV9+Gk}tXQ+`w;W
z`rsS)aXCBVg4>^`qG<Yq9$1H(04=CByyQ0O#d;@Yp(!cQi*9In`5f2IhW<~H3Q@uS
z44=_ywRp(iS6a13nKdjqgXS7BTEVBgd8{)0Ut7p4hPg)zJd$gVF1E63YxBt84Gm7_
zy?S6<-=JD%vG#}YDg~ORS@EJZ7Z+ISfQaBwK&P8Lxq7ooCR;663Dmf5Q&CGN??GpW
z6T2rU54+VI7uPctwcC#lVNu*9EYeL`<rS4;{xlmh$yc8woaDUwml4G&5i*y7M2dpT
zz@tvH8q?-E>j~$jxYL1rkJQ#yiH-yjeIV^*<>xB{?+*rx0Qcz`<~TWKYWa-1I(a10
zeRXqF$=Eoms=68?(baV>dtM;e+La_F15w3U=yW;xy@^RTkRP~UNeuJG?Ij*TR?evQ
zhY`}5`T6R=bsVj<jdIxfpr)^12L!r8i(pdz<+ECki?t~eF#g946y0_AR6+}FB_AmR
zSzk5`B*>IFiZ}c4keLB2%EHbLA0ltf6t+hU_k2bBI9r*ZxvM?f9D?SJzH5&Zn-_4*
zKC^s_N0>L|`a!udp;he=x4Qa1Xb#Sm(ABve70g8UnH%b><F;LFC!|zT#HS1&frs!O
z^*%5E3bF$+Q6|_8{xcjK8?%T0c_pf@#!`ufiRvRbM6K#>xs-pXTnL2R%CHwn-4$mo
zCL0inY^Kz9@XTN~{U5yGG^LQ>hvPoY0cpzWNF*{VlldYwb>?hicq47!cTt7K{#nzP
zcSSULS1a=J??;M??Ye{<L$!jE>}yxjV&HHsCwMf~@4?I2gJ{g`9vn>TlNS+n9N!^E
z!s3vI=%+vlY%gu|YY$8FnZNy6j(+ptN=7~(S*9ry6%XPPeqFmB@zZ)N;Y477WF;pn
zL;3Bax!iUYI_U3fnE@ikvDDCfQM+&^Z1-0Zu1@y&p)Cg;ip1ScdtIT!;knb@s5-$F
zjwWQB=cO~<=@+tP?mIxT@R>Zwvz0z|-%q9)2!+o{)Km-DGyh5o!|8C_qn;>u%Q-z;
z;4uYhEtK{Ft-{x{bsYO6U6<c3=S1>)c<P*UA5~2ID31N<#&SX(A5pa>ZjB8_<>NL%
zYB?H7>>fMP@FP#?LKvE&E+W+RP~Vdj92vK)dSLL-k%^4WK^<^a+l_ThC(o=QI3#C4
zy>^!r3CG;rCOhD?153h3@~7iV!s)B4tDI){q&hmP?SX5z3bW~SBYv_A%v}+$9!SRS
zz3fGu-4{O>C+nh%^Vuc$4-QuL`?|Wp`ZK5Q>P&tOL}1j#y6JtU|2facpyl_w$}9ro
z61Y@Ebq?k3XUF<J&M+iOP@yxd008=9cf+cKTfYyIo?z~pqSzzf2m0IE)YXN^ew)ap
zb$?X|>8>Mh2xZ>_5{?VYe&Cea?R8A4T5K%WnO9hhJ%zb)pvBhflN+BgizjJTb+xhd
zSnnk25qn*-{rgYsRCS)fYtL){^MDIc6ZLjW#yDituhoI`jXmHx5Fu;mS6~(Vjf?QO
z+<2JX6b_2Hf5xW)R~zyl<2fb#Up$AocdQJV2XrBMIG5USCe*njNgq=8xK5o3!y_N3
zRbe%g(X@YfxVjiqm#+Px(#UE=W{a47<E#zKhP|!(Lb7RVB>JU>GBmuX=MZ%^v#odz
zs9t43jS9MJ`BM{lijk{#;q$K3y!)3pBdQ;P+5p7(()(dA3-2Br9c6;yC4j)ARR^l}
zb|qh)bf|`7zPJjYT%~rourjl-=;0o66NjOrW^ymyw$y3o&zk@W{Ef2}J87WB)j(`P
z(u;c{pWeu-U0qD+4?$L${h;R7fOQ)ig{>ZZK6uVE;++?zPHK6QRxHQLH2?FTO<hcg
zm~4(aC*SOwno0+VLLpndj#kQMqIaR|on+mX`QszJ5P+(dU8ky_<KyF>ZU?eM+sqik
zXU-Ba2uJ4{Tv&=D;Sr>nNDn`L&QilojXM?UN0K5{nlMj{?MHc@3}xlyP;h=<tAcZ_
zZ^H4)E&<Ir@Vz!cIV20g9kzk7=KY^=WxGZkMi^Hz)6=y#HgZP`W*80*H%}f}!|0*6
zg`pd0l)%xt93t?c#|NVg>XL9;K)}e{BxSTT15CBJxmpMRGAu5D89FpJ>F{pHiFf;Q
z`C&rW=F;WYgz&k;!Q7Zq^O0(Mm>6M%arvhO+XHa|VW))A(Zh+>c(+|^XtO9T2K3!^
z;MMYJoY{_Us>;iTHb<-O>f$rbhB8Q5PZxQvWP`}qdnAQ-uS^DW0yqN!`Rw;4xYUC2
zIoe7V5J9_*QuUSDAoc;%^f=D<+JE0Z)~ehkf=U0Gz~~tjM?%-#?{EHVHd}$QYZ->j
zUye0%Ih<ovYgH}~K7O#>R2OGODR67lcgyv3j)tZWhKB}Znf;l^z}`%tXEvDR%e1%)
z#L2B?rc+Ouog{Rxq}M6;n3NprmDm`qAic~6Ycd?`&U~|SbD8tnYG070H*VV=nsEIx
z;o?tntqXnEWAb*~EIzs8Sw<Rrdl4xfCcMFzTQpBuNOo~CMf={t`5gdiu`dFhU7j9M
zmnU!x+T1<;O&2QXGU@K_-uJ#5KNcM?b}HaS(kxQ8^_U7B@jEL&!H@~vYM;fH^+bZ@
z_+7t2-DqO2r#?l$zpbD@)t_LSa3hI7x<#z6`Jp-VZRCGm*0O3w_H^c?Zkd<u2R@bm
z6wCfb>XL*ej7qAtNQE-IGmf;sE|yB+O(N|ZK~2R!>d(8%Fb;f&%!LMK{>J|@!p0EA
zjq=BOM2(dm#XjHmDl-9ZtPHR{wOcMm!HO&q;cHb`To+cnI(UVYKSS24=sZqnNpP8O
zeIoHCJ9NA(vv^4Hg@qjN_SL=ls=T6+b-!zztnDn1%xDRj1{p|j|5&ewJMfYyEIG&P
z3`ML}{axB?St33mY%R)p-4WQuPL9VyXeCi{mgIaJ7Xt=Jm=9s{B5H7%`y_TBH?XPY
zYwI6OgjOWO)KNtHg2Z(%{HaONCS&-oY$_F_+RHX(c}4pkk>J8C_D$NqoHbjc?isB@
zY}Ar7{g%8au)Vda>@p$xAZv7#BDK$S1I&`4so9Ty&Q|{wPVYF^%`<zLLEsatfSP{*
z+*&{(m&dbk${&&pW0OvtRU;0#NA$sFu@utxfNPTd?XsW_ETS3XHBRLL*>bgLZ2KeN
zaY~GWu39z+2i4-h*ZrGT03bj}t)hAQme-sMdl;x@AG!;uY)3J*8(`G73MA+rC@&;I
zEhT2^#e+GT$!w6^DJ7s;vh2jBTcxtM)D^`=xD7w{C$lq+;7ZCj6uOt4_HLTyDRf#r
zC=VED9jLeYmZccuQl50VRm<_O&>tKen6*cCxGY4-jzT*b-OzFN*l|+_CM4t4l0La_
z^cE9UsxeQIS<sy9wlnbF_kVFu*J;LItH8j!apo%wr=_qI%msJh43j>_SSz1Nm|09N
z&oKb17%edLh51_`b?dI=ob?+hzNkr_3y4o}-z<g;p2NwhC@)VSaQA<nC0^(bgPO)G
zkS-mwyOO6>D$O%)^@fv+kXTt=J^cu|h2%dRezU-fhCCcK(<=WE2jDAHC(*k<;S4QH
zP!IT52d`kX`GSr1J;inFqNM}}jSBJ*RaI0n($eHgOYJ{Pv@ba4@$-)kOipI0uy7mg
z*-%Ng(bQ>hbHi@#nsmA{R7_P@*D+zwdN=+1VHvj{2}+cfJ~0}Lgf9Zuj9-_RD?~oG
zu&=A=izq)a?o@&WUeQPj3UUbvIh4XUktItwZceuwHML}SC@(KxIbD-MR{*Uk0CJ2O
zMMcs-UTJBU*QQNQqSvuovXtAiswIKcE8GKofQYHD^sf%qvNA{Zl9%AoO93q4EUiVD
z=w_5Dc+&oSVw?xR5kxum_w=NNgoNPu5AlU02eH?x7{^+trFeT)U7hCV%O>vy+<`lk
zbU$o)dbcz?H+RG9$hpnBzq>nw&vr2@FAo3^<SK-cOG>VxVOe4L-s_0vlPP}3%|yYb
zE}Wq3>6!1aZbD&AvwxY9l{E;pKO^r$KvlH>fE78Ln|bK9b)GE4Ww}3pYN5VxU;w?r
zmW{0gCV?N}UcXnysiE529}KvLgqBY@6oWHvjea|@R?{Hol_jPF5(d*ar!3*R%GGX}
zogL=BF(;6`K}MZz(A@)DcY=|#ZsznFaZ*xFsop%@4nNN?$+fj|_V(!aia&`dQ9iBt
z$5)r)ytkNzLcidKsMXYE<gotQ-6h92rjSkzZ`lihBY~TX3$JXg!eQfm+OvAa5X7@-
z6A^5UUZ<h#dt<$IvE+jcdu{{%ZqAYHX8ALWw-8KH5@nc}2Utp}qG&=xhAYNnf<hyk
z%u9DPl}YN2HCZsXIv&~DZ3ZVk(w$zNr;slT3wFc!m3OM6T{lkMdsQ==oo>KoUc#(_
zDHEAvxMrEQ-sC;=+^%IM20h_YEL~vK>TK^Jrg9;5QyYziOY$A+dY<#Gw~O30uD|xi
zU4@B%Y>5q-dM?(9989^!URXF{W#gmQ$F%S*#U=w}JQ?nR>Q&Q)?N9t#r%F~xRn@mn
zTH-~nPP$H)CE0%!{Lfbi_5USG-A<xP+)j3xe+=UDj3)vB5eEL=4kcI!>Eu9!OMH61
z+k!L&_9V%JTL>rm<L*G=Uq^LU=iwfJ!Q?_cz(1oZFDg<}*T3ipKNE-W5i&R^RV{yR
zoWr0dT3U*3Xb~#7n+Pt0M_e8T;jrEy(e*enrk4T?AY1=pR#7{swUrNgxFmY!xK7At
z*5&%j$*Sk}V#gUUJ}oT=+fMe(v@{7YjESTNjwKXZ(cWhn3)|21UeO?tLM>l=;Bm>Q
zsnH4VA06dqXy`_Sm_KDegnXDYvd|3QtyMG|%rIu+nslTed*rM!I9=aFErH(P<tpNa
zAJD8>_BKU1+g+Edt*83kb<!K7kKc8@Jq$F$54ge?77<=tPA>L69o8|G^5?Nqddqsp
z`Ejd>t6)Zy3+sWL_3_k4{&uSQ4U?OHOKv)lk10%#dH*xs+6k1m&1t*L8`J2EUKUJ$
zAD3R_zTR~h|JjHp_YuNN2pYXRaHxlSEXBL#$pOae9#RcALAvpZekDTvsiMmNzDIAW
zW&$V&hIx%SYPJHTLhIfSu;{w&F!=V-o)dVL09ygj8+NAaArwub+adI8gBQ+Xb#<rN
zp$|z|#+E8*&W0H!bB>_EPI8UeU7q{5Y>T`JR?Bty8E|tw5VkRmhHbF}lJ;y+wt~8n
zdp`c^VZwh)a&Tb(W^ltK>eYiF$f;_FMub7Cb}Liiw{oIsn!<0grYoNY1I}~HEeo9K
zWzxj!h}PHI;g%_jC5n=2S|r8XYGRX<G*Ty#bw~a5Clt~n#q`d3`57s;t3u+jUVr1f
z^p<S~BFCPLPxd{f5TLR;4p+r8XZx(l@0gZM&}mhg(fF+}*!)KW_6td*rc9S3uh!TG
z{wv4N#E37PSZv2z1{l9(xu`5zmON>_-2#6-z;dl5SaR9u;(xW^LbGatiIDsW9$Sil
z!ym>MGmj1W5(p=Pus{>Fo{4x#FC7pncK`J9s4oA;Bc_X%T-emD<yD9H{J+K(xDUhW
zN!zum+3`a~MqA(M<DhE~Pk~7kzqags^LCfe5mgI1N8{=MdRtHs`z57R@5RxSsG^r?
zT5hiFpSMbd8acz@m#77(9e35$rM^jD+84S_j9jRdMp5osP|LJ?fzx#Ny@iEyU;kpb
z%p*48tGxtu=5JDc23}HH72CWWKc1-f)*}}Pg!W^StEltVpm9{i$1ncBaeltC_1wI?
z55s3F**Zh1Oun!*{d493fC!wp^iq{NY7GV-@5|Cv>XaSVKzhfq;Ez{X3QP*Li0g=J
z<YV2EoC3YITEObFG15-<x5p1S`_fKB^?^XL%uO>3n>-FkrVhVNB<csBAj|k4*WQW`
zTOtVfqUk&1`L0XlpPrQ0^LC}mH<`k$aau+zza+HNRTot5P+(saTj+<=y>XL@9CXAw
zu&Y*7{!3G1@HPe=;k7cib#;lGtAADWB1wp*43HDpR4VBoH<H0}BHgJ*zqdZ{N1=v!
zzdr8Ss`{0^m<H|tejS3BV61r<aEkALj#huEfpk&j#3roYM*;oa5$czo3>U8pqaW3s
zKLMb4$Ehy-Ps)p=uPhI<Nxn!(zG~WYyI40auQh#N<g^q1`WXOIF53-L-3ne8+prk4
z8Rl+%0%yCVyDS{kx`MT0$wYu2WoBo`v_8(Lt^FW|RA32vNrH|5Q{ey%#3IQTijgw$
zur#zO9_SWZHsM4Ix4=g9PMYc<IL_ZT;`wcE$T^RO9Y!#{j1;mOE?~_*=1uhNHu$Aq
zzia=(Kc78reyvXaVPD|V_0ocIHPvpl;X;xUOzIGeKNN1)S()Ezf5tQ)@MFEJZnz>^
zd{-CQyu6l9vY)4^+49%zq%6#c@=kkL82i}c)rT4`B`t%e!t#;ya{6e9dOPCKHv63x
zve45twn(E)aJoW?Gaz(ERZ)?1)p-Phbh3dX7xVgmKlE_Hu?E6i%WZ7;<R;vYy50ug
z+0mjURIsp!TkO(LgwZZJ;7Y33((_EFWp0P3W3XmET%IIB<Y+wMd&fJI*?RgomsL|h
z=AhF|Ir&Xjm&`<gZ8`=VvchV3SpU6Q>q-01Ne#;;(3NQ3N(?}Q#O0Qw^_TQYy&g7v
zllf^~wYA3DV#$i)_lcy!IVIqqNwDkd4{kFcIH<?Mduw~vq>|HAo>}6%K8|NF3r?2Y
zv5k{*lQ6;$SvrwG)8tQmoL`R2eN}xca?s9Yw3`tb7RkRSVcPXOO7V9gfSz28EO+${
zS5k2GgII(*GVy*FUbE5tv-j^=MS{`%S$H99Wvkk7xJS7_qH(qR!Qz*<_}U*32rtD>
z-_-x+0+_x%Smox272OI16b--uocqk+b(9rI=uZEt*Zu;CBI)D*es&Rv`sa&hmqf^O
zv!P2(0SB&?IhwjxZB(}7e*f8<0y0AeOBIhka~W9uSkGYs#j^cKNND%BD3_Ii2>mxH
zfR8YxdRxD&MYJ0+|4m$6)XmDwR23J070zWjsk1RUkYmU1t}<lgbPP?YitXMbigxlP
zD!6{o&PCG0w<8;qdm5ui{~~eTjzdt;$wXTU9W6xi)S1qUx#ln<KjHa0sTb#n?~D_p
z8ef&Uo`R<Ud;YWfNGh4ZX&is!A4F&_mwISkkqlCY^;|(sH|?~2FM`9|PQt^?+auQ~
z7u;k_hm<Cd7Bs_+gLTHDjHJrkFwB#!>eYU*`QKGX!=OJYdfR@~F}?pK*mAyIDJ4rw
z-dt)efK4L5MRx(~9Toz?v4P?H+<o_3)CvqU1E84r4?x@B|GUfr#*oa)O1N(8-L_pq
z>1SJ4q!{S``x;MkXcoPd+Bt#X1t#q62dHjVvzX%Zgn(mh5(v6@TB^kFE5<pDuKeUH
zer|7n02c-z<X2Ey%gf~_CUjTV&4&P!?cSW|;KD=<6BKH^N{>H{eC@~|2VszsmeUjP
zJ3%q|Jh3)Zm-F`VAHFMc;K$s4q@%Gu3Hw{9!G#w7O+*ewO-xbkBx9Bw<o)2_^f@1B
zW_J$^6A*{k3fB;GobPC9EhT%0PW|lSak3kB=PC7Df<^Shxye(EF_i<@T$}A!&CZ=Q
zBj<lp<IV4p7Nk6@S85KUryC1*8;i1}JZb&?`&%JqKxyz>&9WSCfAZ)6Bl<Ugc*@qj
z=md1q4&w4YjD0BKo?(`xeT+cx`hXM%1r93wzi0{nb?v4(fI<wmnC&q(6OVtC0BOeb
z>0<<y7#v}M$M)>BCD2NJmY{>Mv`Iy>Yvf-f;4xCaby;pP7HLXz=~w|XFmz@SQBgAC
zKy87UgY#H8o&m94kRW3e)CHcDpSzSZNoG6|(!<{o^-jU`GD@vaMq{^2tJ)%ClVU~E
z=l?JE-ZUP|wQV21npg9n!I;WWL`4W?s6<jB^DMJWNl3=kgiIMCvkaNZJP)lx$UM(Q
zC>IHtr*}Jhp8J0OPpkERzq}vb54T^d<y!0FI?v-gj(ynnec!grTKg)}KGS44PMywX
zR4Fz&aB)3*g%7Pt`9Z~lU9-B2Va5!6<^I~nKnH0m{k_>${JAJM9#i71+GkhP{b^)V
z>fX#(Z8GJjja7f$4aDnHgC9z-z3^e|8nVJ6Cb{DZ5mLU=vgV?00A2>W{w+>%)qpDj
z*#atHcuw(AQ5Kyi7r$F9eHvbIz5yY(2^%%FWLo`0>&mB8k(XM%e#;nKQ#GY34p~Fw
z@^qHLYn((#hn&RQ16jYg&OG2x&;B6Q86MLA@*Sl_m|5b-u5@=DcW<g~Ycro*m}jIi
z`p#k8S<Jm_WmtlmKZ`qChgKz>u{xcp+GkKAd;Gl*gV^~EI<V{v3|%k!&$0Cd=&~t^
zUfCbb9h&{EJEV=?YWO)5M0|hqMavkLb9BAVF&E-ww5v!|fAiTTERJimZE_~HwzV1d
z7UnT6BOh*VOkZ?ST=_IS_qJ|%XUx5G>f07F*i<YnZ9A_r`<@so`dE*Wg|B$PXth80
zvr69@y?tI4EPI^xAb4n>-CX{$uQ#M2$W+7e)|tt38pTW<*M)u987j{dFHHHj{<vH;
z@8mvSO{q~Vv}?Tql?rF}Ih8x1Z|a3QCOsGix`OIik|~}UZPH0{V(Un^SMd*d^GsMF
zJ3L@)pN@*CKgUS*h96oAmuE-)4jOY*1vgs$#!I1MdIeM3bLS|x-PlDu*!URT9P}{V
zXiQB>x$br#{QIk|Yu!bouyNJJ6+;<OWE^zayxO%$>o}LU`mz;=-A-LYBUS1cqxhtK
zDx=E|XHjNf|8ZNNXsKh-=wXr0*+<%D9@#KybZniI>ubirb5Xq^sk+l)2w>O#>E!ON
zb51-gXpg69w^nr;T}wd6maY^XcUr!54+d=sn+jj@w)Jb3(-}K_bal4JOm-C0o<1d1
zt+*~#JY7eJO=Uy1x3p9?TSvK%+2Z6nQGYunhnt$Ynu=;R5?)z+3-dIMzM&~eZz?HP
zU={!VwZk8+G`D%##DSqy>1FKQfVXI0iD?`e8<XRrmf@vko$(Tlf*bbL75{p7$VD{=
zJ6!Wr+><985z;(=G|aR|+@yCY0kt^KI7?Kk6c9HuqDq4*6}|r;829ntPPR5@n_!w<
z+=sk>?+$0(E}paPhd<h+_*9Cd*#cf-1z@30k)4wx!$@M-MfyYYFE;V8=-vlR6(^he
z<Brx<S1K0Ms%)W-y7#6bHQ2r<Co#e^Gr9bAOrD%B>(<Ag?-y@LALK7K?$|;p;c52y
z{d4Ve9sVa(M6;<}Mlw8fjK1HrQxfI$7szE3^|Y&;n`D<Pr&KEUWvH}{-fk|@XU`s|
z!DZ7K_JdJkvg6U;*N8;=cxbEhTcQ-l2p|ycgHN%KoXpWQ0vx}ZG9K~T=d729O0hIj
z$BtFrI7KOoKQE<T@Q_dKojJ32PC-sCW?_LJ9gP0#5%hq>Aj_m{Kj1_LQx%xO<9l2$
z`}9xbHh%qaQ)PdfrQ29cQqtA0ck|ns?fPVRRm*EF|A@X}ZqqBAehrmSYHI4IsbK#+
z=siYT`sM)ACg!TkoT69qiXDoNr)q1h2`xAl{meHYz+xZgjX;hds_ZN#!yosYV?E4O
z#!aSw9Iy}wy<t=d|FZS4xTrtNd(JT9#8Z?r!<X-H?czSxQLLl1A~md8^1ztN#)ojf
zws&-nf7#?05LII+QPOKdo-OcDzEONfPxDUs>*e3ASLvI8N}Z>5&JWJx|2nxEnD)lh
z*6u(WB8IF(LfuW20iGZs@$8*8^rp$7$5;MDz*()fn{#|C-z`?(9uB<9deAEoh=325
z#n9EFiE<jBXuINwtIWxl8LK=krBYWLtA=OSo7aZ$Wz3yB=tc3zPR*+@C@;ABF1tQR
zJsWiHx!jfNku3>4{&syg-usVS^k<W(T5SC0p6aX&V?X}Ik6L9s<Z!68Q9RE_oS;(H
z_x{JLIeom{({utu7-K1Uk1<qo5{K>q^RX^YpTWx0{`^gAiaHN8X9$QIEvSxtpq&2f
zq3U=$$QX|C?_alFM(IeDf2{wUf8y~P1Z<B${D=NIHPA#he+bNwRZvKM`m}v_fgn&O
zB3$@lAk<&yw(if;%q=9pXw(w{BEC;&L*!cXg5x3@TYaMM^2gxd2_JgzX}K%c6cw$6
zb^*wJYAv2BkBf?Wcw`ObqQK)lq;`7$=wxvXYqPYyyv#|~ZTt3aSKRW5ja!7R!{;2;
zKD+qiC#UzTj#bTd*6WieUPP7c^Y=WS!!2ZNB>!GoE^zM_{z+BImj+Vmz0b`G|D>Sq
z3mB(Sx}%fC$yE3(=yW65Q0y8@)ES>f&*)e+Lya*T$ra6h`Ztb$UjiH(DOBoFnQAbQ
z^#PdN+}0*`6Yo34f-nh27P!oD+8xAW1{(fU<Ou6=w_}vss<OunGYX5x6LFM+YmUK^
zcwdGwIUZ15WSA|^mVMNPBlLRpRN>p=t7xD>g&kG4XI#53V0yssdMuN8r4AZ@vqq&h
zo#zZZCJ5sd#Gx&kR!~%=Hg6Y(MWR^aM4C}~b4IyoEWX>DmZG^pFMo?4U&6^L9VMS7
zfw%WXN2(S^YUexKhi_TEYv^`q2uXiN{Z@24hf0=i_L1zw%Yn%e`jt1N!p2$1SEv-O
z*!VB>IPu>REoc%gI9(jn6qY|Fs$_QPTb;q7kZ0e8ez!2UbHVYWMbgyOWx~}UusVcx
z6Fg+Vq|ubl(wNOfJb1UEsVPd4O@7-kWAqpR=4aZz-tVaI^3$?}b|;x*fukokJJD{@
zq`k);9~O4->3U67!lj<Pc-~g2?o0d*$qgD+G-9!>wm~#gx;tr1UAX7Yj7yxA3A1{&
zF`vORrt_KfwRSm6Db@`8OSCH4O#9BU7_r5u#`kfLRPAdHKN<Hi*c_BQzxn!jTbywZ
z##j9rS@yf3pvMwkCqs$%ef$H6)YCP#7l)Uc#L;P5Rb8#C<d3e3=JxhDfB*gBH%>s(
zC3>%`U&i5BVP@YOCvt`tQqt0h`}JYecJJ)!LSSHjgtV*F;j|B%(XsXQathb;8THAJ
zlvOw?WO7n{xC9w0w^?=hxO3Ns&bT*HN!A1k9RAZsXk_V$;=?JPC#An#?o&mdr)=PV
zaHcN%pj)D)wN;eZh)xW$CMG5mHb=Z)Sgq;9BfzU50o!cGc*xRq7|RO?2oT4Py*gb^
ze*aDFgHFagQFr;(8VS~Jw;sG1+4|lsrGk772J_s0YfAroo%H9f;+dpO7Sqaf+Ud{H
zD-XQQo;WXz-ON0iTj%q6+x3cU#;)wAYaFw6D-muFQ*YZr%k$eccKZ5$)*k*s9Bn)<
z2qHc&3KDjN<ar9Mo*4LIC(wS$0+O&eyf#V+PenFfSOH{#9usq=t&a=Wt`YO3(2V-#
zY$uqg!>KgtS*8U*|9V<MPL2XL8m{^g5k~*XsrT`)_!yOjP)|^sk-4Nz3D+014--r_
zK6VT?qIc{W%)aDt+^Nx={doH~8-YY>QsWGi<qth!RriA9VI=Vuv4~H@lW<*(>rL|w
z!Qz*<BM_?Re|@^0cGmmy)#~qmeLWFgcO2+P!P`%-hiXG*8c(1(k7cjZW(E=we*NZa
z$AgrVl>R9c#gHAy?8Q4i{&7QHJp~O9(sdKDiP&0sDaXarO~lYBE^~^KtvKvz`Q|kt
zj{wN&aH@~)*!U2^8`?p=8PNrbcW>FCdE*b#`rmvM_Qb<Og!k#A*xOKFFD#AsI5E8c
zZZU@jH62dAu>ijCx<t%(wbN~R%!T3=U#+kv#spkNN+##oXzqn)ePH$ef{q=Z&%B<v
zI~Xxp+E;mbfx?$azM`Z<zx_xOEhEerXL$hQ<F_}td3bL8*DcoL)DV#wXSo9U2X|+T
z{#?~ldt6cSnlD2%euZ&QmELLNFC01<R7|iZIRm^wLXO2myMcy<MMmRSuCleK46k!3
zJ8ake{Rcb64=)x^&KDv8V}jVY?xej2l!$5Y=F+=}OJcF{v>*ar;FW7Jr+Omx!pjJZ
zgNYOI4Z@Hc@qTuWhoTFm-dCqbYo2;1O3&;oj^?R-1rOguK;90?T^m~US5_RJZqO`2
zSoiyD*d%=-z*kr4sc4i>G-6SFhB1$XIo=Bd6vq&d{Ru0OlcQ^3*hMwKnCEz#rNjji
zM1etffF@tYc&TIWXVo5G&^5M$?RTuqQs$*?#lVT2e0HoLcrQoD<S0eb49!nN`<qL+
z{S0X*79M}ZQC{0{*a>ec<&r_B28wts>vIPcjEu;;i>|{UAWxuN`-RsN=ijep2y+Zf
z;$g!ue=NKHc%K~_b*HPq^gPhQEgN#$Pwsa!eDh#_%lZdp4(#mgk5<?4YQjGM<^u3(
zhe6^9;(N4VFd80OUq5TF%SrW=$h>Iv(1{I`WR-Rnpeq_p%U>`!^rUwr-N_62`Oy4z
zfgxTA8{U^H=FU+yn4Zoi@kaA|T;~i5f0a6sIx20gt+x;+rLz^Zrvmi=hBL}W+Clk`
ztMLb=HWn69y4ztVfEKVet|AZC5~jyl9Ku*wO}CzlpB%%6iws-Q=*IH=3Y<V?_83R1
z7}_?^rADC0P5X^VYGZDg>t=MAcReKMqX{n7r;_pPRwtI5Ep2tD{D|N8o39<)E6fR?
z237w3i-ULgva+)90n&%?){nbbkX&56_>eFq8vpfBf?1c$a*<@AlkZYggH{Qe|FW}r
zVw%4C++^^ML-CTW`o2s{DP<G_$E&aI+DA3SA$G<>%Z~<Jk41ek(oV2$$2!fbf83nT
zZ!q{Hr=g+In3|d@3B!q=Z-`RCV_$yoCIZa0FJXjyRsh#w%!!xv7L*8#(e2{*gN%YF
zv{=N2x~$MMFL7bQQwRG852aXx`a7?7`8I@gQPCP^W~s1#9XCl=`PPztzbGG1#e?5I
zgwF$yFxpX4(hI0Ob{@+fT*awNK&9c(<Wy8t8v7_U3aoR8yi0C6E<RowYlVJ?nQ9$Q
zTpNT(SgBgg;U}v0?hx~QZ&@?QS*4Rcc`hf~5ocMiHYENsBWIETC6+usCnq3uW9j+x
z|7fp7u`R&4a6?yj(4`I7IC2;KjpBhKE~=Dq!`d}yEx<!$-S6gcPXM7jqOZpnKE)+T
z;%pLRkj<~KoLDu63za5a@=8h~pKgm}n_MGXPT5DPo`^E$Vd$HcP~ZCa0y0kpz-ul>
zuR+*`9bt8lv}yZ4ZQfJc-)V6mEk)yp=fZtvUupc|36>KKS9mG)Y}kh30UIvQDazZV
z3uSoR!b_>kFnWkQ@h56WIJQJfON<Vu_yi*&gj=}K^rS|ql9ZGame$sYICl>`BFuy?
z(L!@eZOh}rJ9(pVhaJ#i3ZMX}BGa-52kQ9>XfyCwQ+i(PpO)_`0}d83E*cjXLBvg^
zdnFk6AmL`3Guw+xLYZF{mnH6~ZD(mc8wZE|_`=P1_p--8sex#VF8fsJg~O?K4j(@)
zGQ8aaTMM`h`NZ++bYxZ)1H{7?43FJS;${3tA7_YP6^~94BJLKA+DmxCb|O%B6~T1G
zgJ(ILUCOku^7PaE(Rfbi2m(5w?QX(?o*1Gn<`4XRIsMhW%^q7eD5R)h9Vxdl(F$C_
zx+lP7V-=&a-LPzb9a=+s=O2w8*D$Xqf*bt7k>-$kYi_LMf9+3P%I)UU<tV9?3FpG+
zVAuxC9(7a4>K)J?a6?Tk6al4Zp?{@Lb6;Po$Po_8(lfo&S2e%itTs39$Y$uu)>V?9
zxQ{NLH)94*yP7DmlLi;V&ehS|<xZZn?w$uOOf+b~YI<MRc}K>n?CI$l86VeYSjWru
zPb-G2!gGp)$(56liJF|8l-7`pxd8`!h1nO4L(aNX(2zj*1@VD$HIUY+mkpTnusXec
zN)rD0qrd;l{l6Csab7x`QS(h0P&if2K=;P4ndnhJujGH5HwmD^Wkxg{+}ZH(jkNRW
zax^Au{MQpP79lmQ{in0=^Alg}LdO)a2YBr=tu%9I?s5g5U>Tf;pGN}E?HM^AK0j=@
zl9EAtW8`bLY9C!CoDK9&?fL_`81b}!Zo2p+HVD&Hgqk7TJK`;cQ5d^E{iroB<p1vr
z7LCP*B`DJxd|IZpxNYdHqWc7zQJ-IZ<#&}CYP{{dq*v_!WcYsG!R=C@;@BdQ4K7tx
zN49KyxJg$K?VKIPqF?Wd242PALH+A^wf@n76TifX1xzF05Q9_uuU0t3W&qx3E4&BV
zeb|&xh2Si|ys+AlH}xf{%EGMFTKzPo&#Cnngx4PN*!Dm^q&V!sAMy{g_h-uQP0Wgn
z-O;}PO`bubq6yuuteJ?|ILkPBGTT$-4brq}{o7n<_r5;1NBSMtX2w2L>RB#Y?YVdD
zFU#aX<=1_SR5KZ~Q^rff3N%J-t?w`@t6dYsod&W;?8c{XBp970#;+7J^gPNo1dVqX
zZ2q|h|Ld>zZrCLXbThf4LAhItw4_o+c!FQQO8t-iHk@u0{;gGt{`0pR_42ykZm(w>
zfBVc1ZU60A7pDI0CUN5W{X;W6^q&j=^=Xp+v*N$Y9{#gc{<cv_|Jf?PO*H@ix>Z)z
z9I7S3B#Voj|DTqv|CmPM-)!vvkDQT?GLrBJ4p9$&p2?}LJW3X;%d-_It+Va_^)pqn
z+#$Mji+$bq$Fi*ZAS=?<KaiwWz$1vUFHjY}{vzzgdq4=RM8{5^%+WM{-fM3yt)r`J
zl8y%9m^AcXD-rp||N6?l73fczOF$DD%ad(XKCK*WaOQ~6(l9`E4})(5m=bpdoyp`W
zCq2s(wP6BhK~`$|Mw0;(S8RU+4^)c$m`KG$fo)7%Pft%2lX6<Ip;k|&qdYwz1SJ5b
zyaT8ZxSC{llwVwvoo})Ge_ae-IQff{4%IV4YPbS~4+qB!GY(;3$!_afQjID^#xMQ)
ze$7OL6$XvCnt{0i&_~kSGu~hk``gNqNHqam>=8;|piKk1AAxk>5*vU0U3ilZNjRbd
zye}R{!$WRD5}FE)X<2`>^v2VOD{8I)h#H8C@=V`Fs{inth+>VC@aeng=2rd<t``(~
zRf5DNVl!U>S{TXZ#B0#ggM1OVlDjT}E-BNniTOtS!tk^G`}dc>bY3}x=~L64e_L*n
zlio$F)}gHjiYbU@Seh0wKnWo>LxJYq=21tE9*tEusqmm70<R!%bOpQpddH>mCv`VF
zrAh$PQAJ<7v~s>Sh>o+=O~6Uce(2YCV||c5d^951z~|8LW(YClW9Gq-+1UE`Qm$|Y
zU~>b`;??DwkQsWOTMRDD{o6@FuK#cyO?yb!K<a&53)m2`Rhbf2ht8Bxp}EVr`NiYM
zV_ML#NCOW?g;kfy0lKqR?ybpPBA3dBA))(JvDnUrpgaR5l4SX4$H^EIc951HK+c*r
z;2G19ZBk&+lYi)rg~}!32ks135kCNuTwaL!Py@S`=qkj9=r3Kj)4jLIw#=%_(zU<8
zAG#g(Xs|ACj2W*0e5VaUU)24~2xjTXSFg(5)OM=n-*q)}un719X6U^K4pb1&AQuCK
z+HW3gnErMgRF}nzJ>#NKU5k<k@PSgM_T4Y_D}A=f=LF|IKD>u>J}}*;;pI&4z>86V
z;Os@?gvFE?LmX^(N{%B|-DzA`uB=S&5P26sK5IK8Vcw=@eF>5wWu4pZ&x}%mJw^Y=
zSl1cieVsYuyD&cQx$n5(Q&5YR7tQwiw$A3Ugsrh0T+K4=;V)huTYai#)xoszqk|>i
zirp2R5_4ao_Dy_prZ1O~tZ`o)cRXY=Zft01==Xe#9%Jfm*F)W+;x1Nz+(FK6rX%6!
zyWec0f7f3&UWQS5N=zlKboRZ0C5nlONvl3_RxDib>?H>Wb-a5d7xPk$_sf56V|s14
zmh>m{AecyO`$?tHGvzUGZ)|Mj9rSD9xcB|z$#rQXoTlBmz%M+}wNj?BdS5}+y2mnj
zx>zP&7A**z*Lgq1f-~9+T(hpjuv7cYN|vou?>3Zi*f0F3S-IMoV@7{8^zIGXdmq;{
zK+@{{`}ggdYLM2_`cj{6nPLx~C-dP@M-QQ;Pdka7u(9qF)+*WJnrZH*C%m)WQ`G0m
zO>%nngX{0MFE@yC+%S%5@vwx>{M~Nz4&4CL^kt7Tz0eW}FR0Cewrbg<%?I9rhMVEE
z#d6(bf0@LdO(ZKYXp4FY@&Ol!jE>fcsv8jkd{d6DL>e!_1q0RlUv<;&Pmk2B9ON#u
zZ@WQ<32^h#G$B_ytM;3|<E7qW2dM(otPBh1hk`i_8>8=idFkAi7|5Z0-_PIQ^iE;0
zX+B>q8uRoDtev+}?E%T3Oz6Om@e&m_C@DR(UH#D{>4t*7S^9FEbcHC^2&7~`D9>6M
zN7cR?y0@{}QV{E91{&lw!68#FyPeDA6x8;C(bokeJ|^D6Wrr_5d1qeX@f0&A$0w(z
zD6*)89PFTH#}7su3g4p|G??qV_pp3rfPVGN4&IMW*IH?<+FkBp;HE7vyUTQ08-ibH
z=sPyOz07<qXfJ%g9o}C}7uRkU*gqx=c^LP1qV>2XaUAu;im{x&gQxWcsTf4vFVkL_
zc}#H4!D25hw3R%~=?kL=TSmWL-mu0}|ADmIpU#?pjR_FJj_v<mauUQ{VtvK-1L#_G
z#R%PrjXQhwGd>)Lo-1(?sfC<J(WD>E|MneEG=vYY^Xc9#oG2%og9k$dvqm&r0Uthm
zz@`dbGQ+}n<oAIUk-wtdv|x;<Q}B#+7k`)aw?flJ8q-2S_4|facH_2vU7B+mH!vCt
z3aJUlftUcj3iArO12{R!Z5dVX-@BkpQ9%s25<;<BkkX!Z*cseaY~%_)GYG|&P*O0f
z?t<#r<sUo1HU0B8(W;AcSaK2q%gIx=@B^Xa)2}Wx2EFaAsjN)NuxEY#)M~6%Ef{9-
zB<dM76i3z7_2>E&>d5PMP*Q`TL)o3qc0|v1=Gy$WIC96e;F;SXAk*1K%X_LJ<TNLz
zRt23k@c}{y?|uC9ePv|_o5k0@6325>AChvXTUE6B>}RjhuFQh_uaNSTrf|32)U^rF
z6jgvimn`7Cw3OdB2)md%T4%*!)Y>%h@!?L<)s<!Pvd6Ek^dtE&jQ@=hijf@6H(jnq
zAc~_W9>K=#owgYtP9r`5F?=^68i@lEecm3Vk?h2>!gWzWRij90s0FiSb5r4~v~B8V
z^Q4z)aYi`Idb=q(`d`=VS^M1EdpE561ZG~#E02a}wiNem*s!_<b%Glp3u@9b=%^Rn
z#1m>>{*{owD8p!CPtBec2;%KK8gAEE629spI^D8&R!ssFT2TWN74&^N^=fJut@64D
z7OjEczNMjnw(K4&6}LsR`FR_S6`RlRy(eOYdMGz+*sy(Z(>>OG2y2v8!Jgp}rXVA@
zu2o@iFdX^=18Cy*fSHYXQ#4k*XiBV}*y79>jb#bwiNvmkE@<8b18qjPuDH1P(tKS`
zx&3Sp4Tz?LEjN_pw&B!P0F2ghrn7p@x8@i38$^YG!gsReV|;$$^2`Gf%QHPcVtMC3
z`|?OU>v0@`4f+r?eHT(vx$0wtdyo|5W8lZ8z0^8^aZZPBhsCk&w`?n!O58S6oM<<G
z`3Mx~&-Z~r(+g_p#?QyC9ac)#l42ztk688E42#ZMlaq7aftU2i>C+Y&b=-Jn%-8ad
zlzY;3Ma*0?@5_?K(5hXCMJ-=2`x5T;n}=ynzWu!QN{l6$XZP+2H;ttuXjf0KN$-WN
zeQDls=|I-|)0!7i94J}ZD2OdbOvOYkvazy0MX=Qnk@4#FYc+xtoI|tJiG8wm6idlr
zJLA>>d4`%+eY9*w;^0C7CY~5L@c0#ps^7Mmv_8mhW!d_gtOD4XVRkxoYIwSgDJ0KL
z+#7{Fxys#Ith70CTlFt>T}QTV-TE`Sg=7^wf9m;%GoJ9@t@pF?rfSdjBd+W0ubW3m
z;DQ0@yNR|XQ<IZg&2ie=I77y=La4Y-z|fXGJA5&FE=2OIiE0RTn=3hZq}V7P3`-XW
zz@F8YWUr^MUxB%GMTFsHxR`;rKg<Y|@#nft<&cm_Q(6=ldO<ISQ>5~NN@{r34qa6^
zg`%dW-}K1fP(GECH#9qas|i0tMB~|tyT%V-T&}-EKin0Q4>gS%1y*DI35hA4N#tK+
zFkz6nV?`kF#gq^X0{2kvHVq*rSf5aT8+{#}cb08x2N1!;XUu^5=jrI^Xyyl_?;qc!
zRU9lhnh?rmcw-xsgiY%5K|MNw;rVg-X@}v#!7_Yw&ld+!n$$v-OssQA07WOlyF_-r
z${$xAS-cA`Y2sZxH8nK=4g)dLM+H#hzQe?5)}`J7a%y;^R;^P$v2PmC%3LE@@#(EI
zVYn$;OfzbD2%7@xR|n<Rld#+e9p+wMj-g&Hf#BTq)1ujf1{eS4NVJK70t!dk;B{n_
z9vgRbtYLPfhnZ-1TwSK&^6KpD+?Z8eRrNGphQ3>;v<?p}(s6agbrHgTb=otd0sScj
z-#js2&!qR^9;ZK>l5(oe@~54SaT$7u7zlflDKtf}5}7xOA2sD3pCjT=5SVz3Xm{tP
zrNQ4d3C^ZzOM1XE>gA0qCm5xM7G8QQ;yCFWE+Q)W#H*=<4%UNzR`?>+(kj$#$67|~
zoER6U!JRYC&QpPo?=#XE_*Xjs^^417r7Y0xl=-p9P}_Tb-8Qn}7bBoq{XTQOu#A+H
z)UM%BYxT%ZPyv@=0y4Lu4<Y*iD37k4v%*M!H+XP3EQVz8&j%>@C=rh!2lPC1tvSW}
zDrlz$h^Q{I7&3p9L_X$9an$ttEGW?QT^G<i_!JhR+d#42v|!o`B*#a$TxDZnaV6q{
zA77i!%-P~B4#4y#&z{C~rN{H*3gu_V+1&RXmlu(imd0Dog3+DaQU_|EeL1}g!*e(&
zCXe`kjQ0t_e5j0Dfniu0G6JXMla6_T6PkE(*wjbRbZJf>FUv~o`H8pm2U|yH)Fhgr
z;NEWCXHV`)dG(4J2_!uPgIqzWA_}H*(Bg(7&CxIFWT!gOt~%RSUi%lc7t1lsdqhY`
zC?APRL_{4X2tz0Zmp<y*Ze%2^iN}h(`ieQ5T0Ub!Vw=e9w=OXpq7gb_zS|$2;1yjF
zw|TVE-mO1x4r(UGZ&Mg4aRal)NjSZv7u;lmmRt@JGAtW+(C%6sJ<Yp=@AJoZYoaeY
z`x6?`THrR|AsQzB&#zMXtE5BUvuLoLazU?0@%S2wvhNUlnWZDk$vb5p*U+6e)sKO9
zcSJ+U7WQ~N6L3dm+Fk<tOP0sX21XK7pWb}?glWX$#}{Ai#%OWqQf2g-A*i$s9YdqL
z_B)ri1CI}=w;R;-t*(H*J=gj}*s>N9j+eE9APCQHAeC-CksG0Yp0N8I_kVo3_t{$v
z0$N$*WkG}bUi0PYwxc`Dh?4^1VpdPSp`$!+6?&)eU=S8fR31HEQs@BZ*miuE5l)R3
zvS@^0e{D}$%p3Of()Q$Io^Y6-$tj^L7)_Tb#O!y?t-dS~&<2SXjS!ay0(}It&uO}I
zHqqPNR<#+7zQ5tG-R4c#&QyR~lOBaXvT7X`U)(pv1t#I>HzVye4>el+>YScnnD@Lp
zwWTUJlr@X`u-eaZC#%FEVL0ljbR%At7RL+0JIxtoi%*X!_SB7mXv9V4`n(d+(`aFj
z=K6`YlHPrwtW+bsP#JqpH!YF{@#bNWcpn6((s`Aoo+M-(sC3{~Rci8nP5A3oquJJc
zxBP<n+@<f%&gH(6wJzem%$FeK9BFkx_0(aQjr4{-h=oNZC9z3stWF8}YQv1HoqRMZ
zgtnCm2wChET4<1VU8t$4@qqkfl64W}UR*D@A9P%rxb|e#{$)Y}tHbw)7b$8CwckAK
z=;+|En|uAPZVbtZTaR_00EnDEZGYl&Ndy6%ET-_oXtsrPzQACf5TcHp&Sfce^@9qk
z=9g$KK1fDtl!W3;8I9&@*UgomxdJZKZ|*KGg7ym{*q?i5Z5F=jzXL@P&jKy_Mg|I}
z9QGkoaviJ=IQnfir=%!XX{=!XyjPAaD})F_a*IJ|1Cpz#{>kd2rg!^5G*!fL`(y6}
z!lp%GCTM)_BW}$cNJsL4l>-y05zW5W`T0)dYF<G0%sc}6{nL<PJF{SmIEi|MxEA=@
z4g}94?*wMMDL}U4h>TI+b&)o+F2ZAl2YDcoDu>$J?S5wqhK`g2E3@G%h>hP_7iVZ7
zD6MfFYAbPEy)RG^-HTT*PTjmfd;iPM0h+#J9%DJ<D}&aUVQS%F|342Pz89wOG2HC*
zq#Yp_#p7msIZ;s&jLaWFV8hADInn|>P@Y<lIOPudtMDjU<BFKJbf{z+NMC(%>ZQ8H
z3qkw)=O(`}aAX=Agl35y<l}_yLT+sq0E45{v4Z4$%{LD~>0JlA<LGONETHG(G!m*y
z0AwQ5^lI%`J$d_GM6xi)?EdGvS<hh81sNhJaqSGbKN3$Yo{8LI99BA|aI)$J@5EDn
zqmy}`ecml&Y{iC%S(p=&<KkQp`3vE{bcmb}!4@`@Urb@5=Fk#B@^jRoxNpAJfxzwf
zjUa_iYde|-E>{lwDE*DQ!@(l7RI)moteB>CDKrbJf}TjV1aZhKTo(ktm#*s{Np$QR
zt#x`rdFESYE{IA;l7fXC9kx-Wn-$J!rJD_$I6ICV4wfhlrjY?;d2V2r%vYba7z)%c
zTeFFF7qsdvTUSQ)h1?pVBs<v1im<T6oe@T?BjlGSL8^HKob5c89pS%(a`^&qoBn9u
z>rbgphb3jqfHgKb1CuPwJA{^8Hr5P23J;?s#GEp3wcPTx1P`4W^k&PzKT%TH8dGiM
zT7HZrUgLY~=gPKn#GwV1K_epx+tum$I6L?eO*4BUgTJ5JHc_!^{UKcFq_kqk>zjRj
z32RA02%d3y0&O;8Jj`%DR$a-Ckq)aswobmf8h9f$4+-@-!Vn^_bBxd6K}2%p$`vh;
zE!1eiwh?x$zZ29FY|?Xm2T*A52a~;vepuk(#hl%kf>w`2TDtVjy2K4+!Cyq)<Pd;O
z#<_JPc$&Re_9D+BTouG|C^mdGWphf6h&Y6}T}dB`6qCFI?x$()Y9O=Zn5e%fL$+(h
zshicaIiLZUj(6_kMdK^Ktf`Y8GoZXzBZR>~$jd_DJkoO-&_2rqOGj<KVbiNJkWbQZ
z#lp<xVjoeo95jEIe^Y<Fcu_slY7^a$qW2K6Jr|2up#1zMy3EQ|SlUhGtZEqL9d!JR
z)B`yAZg2-1Q`$84v|u2G2gf=mXx6qlZeY)*mN5v_xc>F_$PwnNFX|)a337bGL>x^J
znEUvtMh^=HBXi|vYz`btt!PmLXX`@{6Y2KFUW97*H?&<6Nm9+@Tv?e7plI2@KikYo
zU-+W?L4o{UlM^@!B9?)HG__~wd5je!XNE(js?kzpSZ_}dPo?4P@ss)Qe%S@BSPx~0
z9ahaXczLF?{4Iw%Oyp1?u=6ShlC@{H&(X1;XA|9BsmOeUhqs!$VUArzERkB0m+S#V
zx_0gZ01F8sdI$)2M;h7HpYM~9RgjUPK;C5bofklZ1F^-V37_*?uCQ;X;GE_;aCy0s
zcOobdu^b#6<S^-E*dEpfQ|B9JS|4%#=TeA2JPWO#){UD2F;v<fmz+G!v9MFSJft(i
z3hH6vvTga6=QGY?t03C;$g>!3Dd@>G^b!G>6WQ6_-M!IK1Hp4^ob~6y0AG7D4NWBU
zezYl^-~SpO*Jq--5W#{r5jP;55V+hq@G98U6VJG{W5{XU6XubEv`>PPLd$m}^HbC$
zTIX$X@9>)hjvQ(N^}++E^{#qhLqcHqR<~ta&jdouGBgUD>7u5;TR%(DLQtAbKwW|7
zUI_NaTvy*g$scwr<dR}KkS8qeUv=<0Xn&<>1axV2B9?8c7T2PNrVIMie2&FUhFb6E
z3AS%*{6TIzc_Ti5Dj0FX0HUF|Hv{mejJ+__kO?W+*;s;LiP2%_YEz+2<=S!OtXnNG
zRSV#)w59Hz@s$)LQXzga9HDkY<R!9d7oushG34mNcy(@TBRzq7JgvOG8k`@^xpJVb
zl+YGPz4o^Z@+y%pWkT$z+%VR|?d8R42q}Mpj(1)|XY@^eB=E?ZM0D^Ea2UvB16p)(
znVYQBDBAD6JH9!eTRhXO&!NbO-eK<M-LH*I6Uzs%c~C#0`^m#CLO8hzFuPRHm=*3u
zuY?_e%R$vZ{9$W$<_{Xz5#$D0qCyoQDPi356zXaUZjP~pjRG2)q7aN&7I_^1^h?ni
z6Cyf9Oe2@dQ**N~ixJt;RoNUsiYNjZG%LF8-%MIcC}02bgz5{nQ)V!jCOAs=1h4aU
z(*l5=B5R!J_%k(5l3rtW%(XaACRVUL&f=DK-FKm}*Kc=hS9b>Z+V$)g3qz`T0jsUl
z4!S~!#Rq7=e`c>uOfDu>!frITAz6^D4mraWPGmITSzg#U8yFr=92|ED-j^SCrroo9
zH_;}dTP^5<u=OmnWEd^n;nijZ7^%p7=%H}mXD1x`yV<rzrtNDNLE@DpVhOva-Z>u2
zH(KBy9T%q^nIAn|`szdIqWrdlg<d=BOH4+)d_}NpA&iR$lMuxj)e*X88grjCQ{X-<
zG@YLuL>1s{t5Se>+Bg2#8}aLnR!=T3#ttVXNK$@xyuUI(Y;yURTXoW7gE1Y71o@^p
z*tv~=%mNe6Hl%w^^9M~3&zLs?(KmW@M~TShO8z_0V`V`0scj%WR<HcMHv`$YEkQ0(
zWEpEf_6XB%6hw7OWyuyyeJ9%zi!I5mt|PF)#r}(iJK(<!0fR*5mp^K;|AZuY>eKww
z@~|F+=-Y3#HP<;U%ppysX(@g=Zi##+xLcWVd865T<XFGEX4Fu&W4}_tq?;CX5<3+U
zs&T<sHcB8}?>{81?&d<I-vE0uhlD<@*Q|!=+_$-b)w2g}bd*1T{%kx`43w~+rf*JE
z)nQ(j<Id;zypU&s+Mm|LEb%t-SPl)nVlKv2VXz=O>VB;i>z*}NblP!c>3)m#SSPo1
z4*<5wtnRwjU7hWINInFmdkC*1(Au46ru02k5u6NBovBJ0ug;GJEl^3(du%7E=B3}9
zRlLy{Q~8sP?qL@wXcKuDe|aRrr<nmMK0{@Q9TmvlIKhP<UnvyS`B+ft3CJbtXTa5&
z%$udfQXM07d6F5Dq3rjt4QfC1*lc1~frUbP-Z*Vywq1Mn-r#dS0QzF@h*areYa(I|
z6krOJhR|fKrmv`~w&qV2-1QFE5lA>qPcL1J48-;$QcCHbbX|I``$-`Gp{b{;KXP|e
zvHSB-Gfu`Y*Gme@A!?x~VCLoho^SVH@Z>#$7-3HixhrRUW9pgMkI+h;L_WT9d<A5W
zFzqe-X^!F(z#Hq?t`}_5y2vj6S_7s=_STdgE3EfOlHu1+CfkvUg)=7{KXz<Rd1yE=
zrVVirMGMj=B{qH1YBp0z#&#x6ieD~9ll&Z^Z)(?vK*=(Y#2su?omv!`#^Fbhid33$
zOW-10L(?4%zy%$j$I%LE4u7JZ^!YK@zj^_>bDR1REO}5|=RJ%~Z#-jzaEui!{eSVo
z-_c~MqX-09za`O{m&k0O(IKs`hO*+r3Ik)Qo54KE!Jk(MAmXq2oO$J;w(c1<3k8IT
zk@-LkdG05{LcAIbQy%H<QLc6J&wTRrT%u|5JoC<9fo09(OxOi`2$?;~Gp5GS$&IS*
z1a!4s9ka11r(KK(tDd9wupHc6)P@8bIEq%4AB!~Ll8aBax!TXt?SVLz7e4dS_3PK8
zDtJ*i*Ft8R2CATwsms8d-QivNyHJbBX;|Y#q_UCuM9AZXUjh24{Ra-5sVws5a%V+t
z52+_?PPC;%jb$IV!f|;!zqk|>6Fm+ZA-=g*Es)h*RFD<2rUsFQ-LtrFl}Ggn<G@Zd
z*#56C6<IXQT`PmP3y3?xz@Yu`Pe~$P4>eKAG3|+N(}b}%Ct3ntaKx5F%*m6^>dWrs
zg)v$JxH<bRm!bDQIhn{jMjYE?Z;&5TGmXV6q^f%qrxx2=U-{`4HhML*?@9xz&pdyf
z=oc`LQ1Btu)Fd;F77Tq(JRBC>2>T%FmDP0JzVVJEyXCkkyS}i+YgAT6EW6D5YP5ch
zqh6QkBCLpiamLJ{zjONrK?I#dx%4e_SImw0V{B~h*xGs-ClLK0bha)>g=>B=3%Xu#
ztX^*8ql=;MKU}r)Th)Kj7Hn2TMU+f3P@}V_vERA8FfAdQb8n)5qgNWz5T0BURM{c1
z6;)Zhj)0BsLcXvz9}zvnem2GWkLE<-AMn0Os1b+F<mVS>t<~Lnt*^BJkGd)w0QbYk
z#|Mkp5ohncgWYD_bUW@#3gH{hi+6BvL1jL)yq&lGug8HGDj{%ml|*@hrUmXH+^ffm
ztfAin|4h~NN}w^RZ3Hzy7i~vQR=_B`349p|SX;*{l(@-D%U@&l%Iec!T4vL58A$zi
zrb5Hj24{w1*}6R~f~Ygl6sn^`UjL9Bx+IK&dlEgD_v<D$3C*4Nb?7BZ(tB69^*)^J
zpXo9~oGC^(9Yt7Tib9D#7ob2UmWwGYM5%&e%o%o=ck09G{s&u`xeP*xk|chn@5{XD
zn60%D@46s2fM;ib`W96N!I)iwK?w??cK+Lpmx?=a&x-kX4Wl|&$IKkvki=u9k-~EG
zyNvqDh>8JG=UK4DklEEhPNu4AAx{?<Y^nB}&U7QA)|dby%KY~ZqG0d7n_-6+@|D=y
zPFzm%)GU#EpibJn{PO(=_o=#7%MkEXY*$VMuy$Np_@>A^HS3<DH)OPFyDrR4czJn(
zuPaS`iol}6mq-1Wi_SoHj~~UOf?C2}lsT<gr-i1|?bO47>95Gn0vqFULnYPzM}wHO
ztgNhl4<rSeK9Wko!joS6v6wM?rl^1$N0E@lA#WosDcnYj1W07g+zTPfj;MB`Rsf&f
z@3^9$?l|}Bb~lbezXy9c^vvjSjo#0nXI17CyZPgr#dq#hk~{_>xMMd!+Of6yL^b=<
zBgYL<aN%X#ZA-<qJSgVcTn*vH9oax-2E7C5?Pz8u<BYV<FE++VL=`R#9Ah(97^Xzw
zM{#K~U?2+SUfqJYf9WVurUbR3`<8a7T+=ME8@jZ^=8@@+%p_`r9>DItw$M{NQ7%*l
zu=V+|XJeoNeF}IbewH#6Q*OY`nG!+;?L{-%t=S3Ekv$;y85$}_VYnQcg;J?2w%EW#
ztvlm`rBPpj%3G>>)o!b<G1s*_u&p2EjwB>%0ZYM3BX}WF2!1lc@*<)ny)^La9@0GS
zm%d(D0>C7Nq`<UnWGBemBi{_T(+eRAK>A`gKa8~agmf_QJ#K^Rhy~*_ULm$9GD3D>
z9l4T$9t>!#B+nM6<d0N|eA3vxd#BJjlc<tp#fjC9g7LY8k+-V@<H6_mKNH_`;WFjT
zCyxZ){=r~;UPO5JyT=A{##u4RmYLaQW{EeFqEeJ;4SJMig%6DuJ$lV4Eb1hD$aa@c
z_u}GPdX4}K-)<V8XOG&ZCcaOc3ZLR5TL^~N@eM;#sOC~Z_U=7<B2m2UvbTHl=1o4T
zL1g>B+M1dcZw9f^1e)EuUqS$!FOw*48w^(MvwG~N#I`@tTt2))O?w)!N~hW^xa5kE
zrs!JRLxa$M?o%W6*;X3+(cV8SgfFH+nM_wlr_-`zu|jCSoDn^AW~5YAL)1)i^=haO
zcK>RO{`J~a3Y*YCmQaN$7(p5G>vY>H)6t_9uik)DR%6YYHFB*Pifjw0<y5T*+Rh}Y
z9k$=Sd-smVmf}JiZgx<l2Y7qmJVtzEwN_etRyb;DV4+lpN@i+$N<ct>eDZ=iaG`9Y
zuKjM8KrMZG--%W9hK!net**>6WZ?)`-GA%6vn|_11x4V-LklxTsYQC$J<wVtKRyta
zlbDj2nCQ>G7_PRg>|-_B{t{HkXI#t`+Lo4=_wC*-ow!O|^YW~al(~7DS_SN43_d#^
z6#R0nCMf7Zjwbo_>(|sq6y@JQhQ_rQ9B1)r(*P49_$+9*zA$c03M^iAh*3NI6cv90
zZF%|Y{`=QTecX5nlqI6Ns4DS0Eaj?M9=#S64e%ijI#6=0)02~p0U8c3krcLPjX@rq
za&12JeG^sdbT|#CN8~0aCeqCISl>xMTTj4{PtqYIoUEKx^=-z(#ic$>pn%(M?)w(<
zyLayl#(M>j2xi(AKw?5xR8;SA^}s+|XAwJyRX_@Q9V*{RuWJFuyo`|$dVQQXtr)@l
z$-BUK3dnUKd@>UgMtiBLm2ZY3Ka>?0cSWF)Zd(BUHOK9@x?5u4lW)C!GM%;1hyQ;p
zqaz9H)n%`GEr_duxPBmAsekdK^QZ|C@MkhvCCcQl_9BiUrzibo2M%;_i@mtY4A8-1
z0Tpnpww&%V;A<lk+P7@kl1}EuF%~%3{;wtb_1~tNC%D!)l@9^(X$s;_982hmytFl0
zjV5(m!9F!vC7b9`0v6`OXmju0F;><qQ^P`$?d^(ud>!F|3kVabs-TKYLD135rI5j`
zj7$G|(s4eK=v3T7z9c4QG|^vnt1Tr|t>OndHoDjxKYP#f-#&C6QJj@YMN^ZEM1aE~
zx3Wky8L{&5Dd}Y>p*$ufEbMe~j8Pn~(617gS&KSPra^<7m04Fyi`;n0Y8dYA?&N0{
zx^wrWHf)%`1!+a32~C=B-=dVb+a7wZR&C?mc^TNBDcGOK+1al_ZytvDhN5Eb+I1?t
z-8+zFH30&kZq7AIT0uSII1f+jw*?H6)(I{i6`21_fA?eQ`A`8{QC!5~!^wO1wIsKe
zuh*U}4_rt60IhJ#1N4N#i`i&GUyhl^7{r&+MAU?5nFYB+*yQUzgs?UwZ$|)*$v`@D
zRPYH@42jtD^UZ(W(HPZrdctRuCwtDGPS8#f#f8vvFM6}KY;f9?yC00=h^n}JUld1o
zzgyX-Lj}hnBNON6xA)@wR9#5~T0S%m9y};#`WBJ_pzeOKvNWu3`KA6aT!S(+lAn8d
z<y^R^l4!qZwPo|>w8a-##!Q<jz2IsT@}?bEXB~m$#?taj`c_6eIgvK3U$5GfWrzQS
zDp>p#GK9`=p@-(FtE;&|7xZREy7PR|c_6FXgUBvkGF)&vzt0Rzx)T!<0IMHeBy$@!
zilDn?%hs)lGsQJ}8R)W^*?8s~H7;Pr5YnF1oI0=H+P_pt4fDA#uQWS3SlvdOThU%*
zj?JxwjRPmaw`JS5%*0}6XJ<%gr@$ZwWIe3Z@u}2FXk9sQLiPPc+F!Tyf4?r>UhB$C
zlF~rGUYA;1TU$=!;M9<Sly02rrK`*`Sr^{}l_n-WgR4L2WvJUvb311bfBhPd;)%iJ
z=Sr~ZZ6f3WjNU(cv*R(CQ%=_{r8N#hwS=r(Y<DSCV+vHkUxikcv=n+!GEB{~q6Po3
z>8VfV*1ddU@$s=_yAp!O|AveVO?R%*2TWv>>kGfemAPs7lxgJ+jh(VG3*n1+i3$L-
zTCrW;{gaZ{uea=2MJiB)t_-1b-+zrw{&kz(AJKv;mHMJauV7?;aZw?^Ff&s&O0<mS
z`0>PA&t<G(5bwmRE9>(1vnxj<y=gNHW@cnGfaHQ)YXR^uOY~RrpH2DvSqCFP)!!D-
zwbF!kOrs@Uw*79v2a3@OM)QG^3Z0jTxyi=i5W}Gdfw_cSYhvm^N?KKAWdnue(o6Yl
z45cQ+D<o!S{s_t``>&^VgqvHA&=}~cqvg)1YdWJN#qzHU|MlPQKkoy%db`|7F0RZf
zezaOp^RUUs$H!+mbfbfV`rJJiPkJGB-5wSh(}tZwOHxP2<{>V7t1-ILs*RrSj-R|k
zNqVc-aX~@#w@=FWX*+qKa8JEG0PZp9taS<^G{1m=HqCNzQPEehovCnptqa9iUOJp_
zU#qrM;(iD+Y=ZnOs;kg$KHap)GKjI|GU*TwdeA!Rr$DuCjWnysDJm+G7Z>0s_fk;E
zXb=1fDgOK3wiDCdBl~P0-V^ntHB>12@#8KumozkhvLw@{mT5IWh@d6MOvrg{9rN`<
z@#FH%ruDtB*W7o%oI<X`m)YB6-4liAsrK6`Q87H^qNT~>V7#!(YCU=4MC<FDY3MkM
z^VSaJHp&M0lgG#+Bvf+V<2ek{cIv%RXp+p9&(@HVia0wS5(S8+>XRjz3=5}jGbmRC
zO+@bW<fSFM?R5NCH|;#gMq|PKXPT{c&6@3H2#;F|tmzSGv{lWV)F@7Z9*EjNg=Ab>
z+HcyLf8MXt6EC14(^b#w;}d?2cD#K#CitWNE%h1GLX;6?87d5U2wr^7OJde-m}REh
z5y2T;laE{D(t7vDGMc!#JD&sw1_lW%UcVN4KM^&C#4Hauyh{xYJ^SeCH5e*%(iFiD
zdkbEKkOC-pWfBt`n+WK&Geh4jD+kcSOGGP1sBG)%V()A>EyQ}&gxZ#9X*-h<Jaebl
zK$_Yf_3o$cqpw;L6*QW%N4jtriIb70UGWtqnU-GBD_5Rw-2Suy{SVbuCm`*hUGcuX
zXaW}K(DCCE*jKlZ@?4RWO!YR|zjv<z;m-O5FThFYGavi+WB=tFMRdhEJtxz}WoeaN
zDHyT2f1kf_jIeplal9UMXRkv7JQW3G=NzC75jc|?q5PJug*H3C077fKTP)_u$jYqu
z8V2tr9;iGPsipHe;)ZOqz7*oQzJG73j3H=l4LAG}oMIJe>4y7gK1|%_es|~t718@j
zeM&RpTcL#~jGR$)IAOSfegvJH*TVz;85j0;Wav-3X`G8T?TO5^B+Do2qSvLZUA@Dq
z<v4wcybQFTxpdx3m6h*kL*r@GUw>V2Zp~3-<F{YP{OK)^L_R!d_noMQC3tHmdJUw!
ztZ^HRiPea^-LbN~*pi`tl3g`dD)xG4x@|CMmKwe^XmeqYzvYFn^o{4_aKX^dhze8F
z6nlJYKSVt%V<~m>`gN;^q3b^ASv+)DnFr9(Qe?YR;Ct!A&NOYYtf5kzB?vd2e(Lfi
z0=fw{&KK`(-Lhr$mcDJpKe<!V$Wa+#;jMcZN!_oNvyJ0(bEUUzH%V?yzPOK)60;L0
ziKyo2Q3ZrEc*1S|>?&FJrxU2RzD~S~Bp515G7t_iLOjcI=#cQr$_nn*$Jsd+afDxZ
zcq*=kpmT<|LxhyzJ9Ed<QVxE8FBMfh(%}U7#L3y&0K6Y|6wJjo2qxq!D_H<~rjD@j
z)*zChIC{PL`=_@ph`C_O#eMGFx#Q<^M|Sh(&EPH256zN+DA1>uadF2`bwxjm=dG^n
z<iesN#O09)R)NWWMV<={2wRhm^qA{!3q}TVjohL94DPD2r!Fp1moK{n@tCke6FrpI
z{Dzn(t^9?*)&LE>Mny%{HbzNRaAt_MUJ82NiH@MP-D;Hl?3q0LtzWPTMP6<$Rz?hF
znBQV3i4d40wBz7ixTt^G?Eik500O~(zxdrZmZk8>|F^G*nccsgq5AjF2-E$3M)Tiq
zaN-yKf4c~$zeBkH{&C`)5z=o*PygpV&1-%;g!(^kh+BsY?tfnX{X3~mzZoO>Ki?Ly
z<M$(~|9;PZ7UI8`;y(-VpN07MsrdQLe|E&bcf{?N2voT%s}tja3u8(w{Is4IokS}_
zoo$w(At5cPeWbhsTfgVJI;zbp%eIE^HzpXh9ow*R<MU+`1aCJl+7<B?Lxu}Tf8pqO
zfBy}W-ootG88P}zPGmGwU13*VvNNlyscHSzb2f0`)3f^eQ<p^UX0oDh)c1s1ezQR>
z2Wx`!((<~hmEyZ!eUKc#D>I8wRSS+o^W&BsJG^6K16tCPRnEl6ec9u&p2W?_$S8}M
zuWZ(?41H&K!+RU!AE4iL<96y>(`U8r+=;v%E_kWpH@3At4xXd?qn5T93tLi;T#O#T
zxINGP{F>Vx7N%+9YD1%vs%pa}k?E{vuo|_UxS(Br)z8Z-6@!jZb94K69u7!3PLFkI
zP%vLjW9>@U^{pX)A(La{Wz2F|3vPc}`-X4&L&W)u%{k+T@(K#ba}!YuGhL}*1vAR{
zmZUWM9&m9&lHdkXZRp}NRaFOvB^Gw>wp*k__OzswlL~Fj$YgEgbunVVy@&Lk)=@i<
zf7<Htlk9BPvv-fZl-@w<HLno3W3|F(7aJY@h*Y}qeOH%QQ*51lg=Z*hlJB$EM5G;e
z-uGx<g4Ng&+)CKBWN%Vw`O3CEG-s7jAj)BN^U?qs_P>t;@ybaQKl^cGTjZq(bWdy_
z#3Ty5d6$u~5bhNZAXZMv-26Zysr2>h+vwmqS-mndHKov&(gVQ7;)=xCw`FTn9!f`*
ztJu5H?W(_^Rv=2ouuIX0p~j8Yg3P`Y2lkOn4}Dl9nKBj^J1mTuts3n6{0B+ceyCro
zP#=IP^{=HpT$6AVC~9s$R4H-rz|+w=Mt@54w#Nq2lShxJAtPb9x?(TyxRZ{*N~!`-
zU8&PygiKy}ilvsjC{8y^4IxWMf^m#v;t$Y1#I>>QKkeZ}bLH~oICMEjfBe`AP{XI7
zz!@oz4aQ5Gc+WUNB4-2mn@2pZhvu`MJE!{Q%}aziH>|9(QB%{U-YCZz_*;iuKlgK2
z)rJejj*ha~*e)tQcYd7Z4FD89D5*B|*=yf10>|K%ceJ&!=|~zLAFp`4HiZIMaPXjm
z!y2v~xK#m*rfWIJjzmVuDG3WlOinpQn^WhNmL5V>NmC_p<%*x*UB$paB_D?^m)MUT
z+O<b`EExJXsvrRyVkteif9r395o#fXAO;YXp%%CwA{Pjz>s0mSO#8(lqh1GDS;>n^
z4h~^BD!Ow1K0XG2BtDC#cVtXjo2y<MA})9Do(j#tB&EkXk^$+DoojAu8}#shkdl{`
zh3xb4Lu5cA>wb?tOuJBABWYIqTk=$I+D2(t(`DL{kah0dxov|8@VWeego^6dg{84d
zNSsYXMq%#lME)G*)eF9UZ@G@48X7-;t0(1aNX@oCZ_0Gr;lt&m(jr^y-5?15NOh3d
ztiODX96k_45_WJXMvE2^o5~Nqe3?8rG?Wq<IkIWvyLa0%l!^^y3STBgM~gtg-LJ%P
z>-@q({OeO1v68WO{&XTEq1p;aOXD~jn`&+CiK-8UaUVWh{kbLM#83e?K35&vbc*D(
z(Rt~2{EcVU9t|QnF~aKA>e++~E~gq601rLmr>i4-@Q~GnR{o6}dp57G8`%s1lj5i+
zxjoHK^uUUK+KaqW+=+qT6$zWx4H*CJF8Srgh?iUrh!USMj&)=->G2A$u5h&U>KPck
z__?4kps(KGDM*po_HXt0%@6<lPb2%VJWh--bI17RU4X>hlIu;^b?NRAK#ukDZ5R6e
zvy_TWx?b_~#iEU@vZ6u(*`kcOIgrqF%WvI$4>VVVz=ghHede<gN2icbHB3$g{fI9A
zS1&;P)&q^t!^7LY)b%tqNucxq%-pw3OCIA6K+-MeCu26+qP~88a(3sla1AF^3H^M1
zqudTOJr4|QI8;{wBerG@`{%K-C?KD@x@yhyQ(rlQCCH<cSo?jn-8a5{JBS`WDbeyv
zn3>RMvoic+O4*nB8z3lYaq;*Qs+V)d|7<S1Bq&%+d~!xc#tAjn=EqxyaZwsk6+;kd
ziiq&Xr%PE``8PJ!HqQw%R(5nK_4W!*PEY%~xg|C>)v=sD9VOlCm|#)FRQdL;jG&<4
zt=?|2fD`+^d<bmH;w+|C>AQ8=A`Wu74<26pJk%-z^zK%n0Ein?oSaJ2Eeh{(s3Bi^
zVqyHp+my7Pw`2)=Z$<#5&>+K#N~)`?6Wa>PWYxwzZ6kSnXU`^Hayv9XH^(ZlTzEqL
zs@dJPRB;OHEMqD*A`t@;3)-`+Mln0PC9DiXWzy2p+L)M7+^~3ZSTNGX2M?6tQ{~Xn
zVttP-=qmI4;->d~C6DjiNx%C|RXKS!FTa1VMHWv|;pWXhkz3N<U&Y<ZW$5*?9(&(}
zrXN&B&y1^M5eOq^7_T&3%je)|Wo{0%;dK!AR4Z~za#^>XKv%|zp>JgFnXzTM!B~9>
z4JEe5z|--p$KvLBZr{1%lau3BSY$u==@X9I5nVmKX7N=ckgo$iPr!M@xJKc(@lx((
z!A45QowwZU4()f7c|5C#wrJqS32|S1I5|%cDdcZ<Z~ZRV)rb$Tu1!1vkLXCB<FnRO
zje+kok&*c{RX1cL<6pmy_{$Pa$VXd}l%~=#l67Z#Y05F%HXPL*xz&}2`}ViW*VdMM
zU1Hzw#(6p;(|X)0S*;+y(d#o1hnHWz^vdg^H|muqokaW(O5DVcc5O+@DxszCbWF?#
z<L|0rlmz{Z8iSvIOr?P=&#)o#F}GDHx(~Q+HQyura^AVKXC(@(&CuXgT`l-}yeYN>
ztfC`wCKLYnrKYEryL32NczCX_+qlgeP(Tg8p`kuB;%)(qDoQdgcUKze<jz;6=OjbD
zRjs2Bn<PkR)%uRL^>GC;<;*W9cQ`&eXVhARX+B@M4)i|$Xi*54&Aop6_G=WvB6rZ`
zw~tOC=_e{B)d7xj`x`$Y8o_*vwSvd$v~t#n%G(8Y<@F<PHaW8BW2%A*4l%+@$RV{n
z)f+pA`D(6GLxTVw-AzSx<y)-{QI!iTi)MHG-+Aq;rNRD2E#{;GnNm6PkLGCc99DQI
zRaJK{aRBP|n308YM<@SQi^NKs<b36<EiI@Z8FQaOOSl^blbOYDHN7e#uCl&fD$#0j
zdE8Oyrj#>S3bnK=P$KFaSy1b7lnmv6DVJEBc;{QPLHF!9eblG76^LmH{+fXrQ;R=)
zaHhj@!mUlJ_iPuBVHwe<Q(aM!^Vbv(L1VgZI2m@^%4`uc1c-ptlB#;|4TSSsFt>a&
zdGzGT*WyKo!@ggKdFF6WSvFG({CT|!VOtkw=_6;x7>qqrf%@s{>$5Noy2vNZz3Tjv
z(<9leC6@2UNInLdWhMLzrBlY1xg3^s(4yCK+k<ez&!5LUKOXSanchl)Osl3AY_K#}
ziH57xa{>Y;*)})~D4Sl#bZgNKWwY>Ww-yfy-u|cwD6cZXczR?Idf~}E746Zk1rF1R
zeN`wjCb6L(h2HM_`27yC=<o+-T3S!y_3Mh!NhQndTPYR$`n6PGAXO(OyV2&X!0_n>
z>R|xCuVeIzdLgz<OWM@bbI%@!demfXJRZN<PR%8vUEZxDr)Ol0mdMvvB$DemjviG(
zjYq+G+)}&Z`VFsxMaJqSAtA=eN*Nb0rk6a!hhnb!MQ2Yb1d(u>dKuRd6?oF}MLs{i
zs&7r%`r~T`uqw50VHQe`^VPocv!3PyricTqgJ<JFe)=UbRWSa0*r(566JFi~=+Yc^
zv#Xrrz?YA2>=*joR;g1iSzZgaat5TWZd%C0(Tw?VA5jl#BRLGlix(}=9M^TMc(+YX
zwOd4uiuKZ^fXv&UnsjFidW#kfe|*^ti_T6XnU}{0q2Qye0>xnhi*Xty=drs&Yk1h%
zxk0O-f{ym)nXzEH``IbCQULZA0W?>-dDCQ@g)r<I0Ig=g)RA!M!CkPe3aZ`fr^kif
z*YAW`fVo5^jy1SWI&1KLw!Yejo-FPeqan4pEbyPiBRlB~(Uy>?A+ndRP4UWU{p580
zp^<K}Cp+k3)Qc95ojUbiFVx3pk6P}tlxebp(d;)mD>Z$U@gEZt$CDj~x9&7cbft(z
zG}(Ph4+UMnFb8#d$E9L;A=ydWasiy|j87pc4o_B^!dFZctyfoy7M7;GZjISTXFKdn
zIC*P<>NC0re7k!b9l~?%@-Aa+NoEIK6Xr6Xy3v@)$*)k$$Jq5*-MQ0P`sZ7iB}#6S
z&gP+9Uc0#nl*g5_D(HV>SXFl-ra0#N;+_bM#}lvQ#c7Lkq*H8c-9utsC@sa^EsBWH
zOe`^ZOxX_6!A+1g6oZ?1-g-LlDtvCsdv9%St#_36Gab(RHp<S;Z=e<o@$menrYj|-
zqvKcO^%uHGWOPZIi!-~Qcq!3sc1>`H+eDMzd8i5$H{QqZLgCLH^KuDH61~l7+W!xG
z@BP<w+I0)-IEtepc9d!dL1X{{X^9186lv0HR6wKzM0yF)Q9x9{LQz@-q?btV$tX=g
z2tD*jF9AXe0YZ{@XP$H3bI)_;FF2p){>%?ExfPOcu4|XI*IuguzGTI?_rbw_&!+pO
z%!9xWI9PJepXDbnm8Jk+JLg{Yjp?}(lp&;VNGpAn3C0%X?hOyt^eF@xfVj(8iZ=ZG
z*EJZw`#Yg}c~)V70}rTLVlX#0HWpgiWDzyrX^^yOP1T}~O-wjn5<{UVyEdNT69<3!
z<rjxd0s3q&w~fj__P{l;px`~XL4cXBJ#8p{V{Merz|2en%h{4ehd(SlL~O8WhgMEP
zxm+WK`-(f%?GJmtyxoAWX<T<pY_fy3Rn`S0aZB|;XZFVuXbSMKvZD*oy=yvN=cBA8
zhPk)!SfjfKC-lWs`imD~%3c?=@Rdt{Ua-uU{`tiiPl!?VF-sX`++qS1(*l|{a=M;1
zeK?rY2EF$jLKG@7tprsq)<&-v0%(=MIB4evZs>jHc8M=AT<%@s^P`0u1KHNp%Bq|E
z1-RQq0aYouUz9;a^%U5=OZ3Yg{}lMkFJ|dj&ey&wzcd7Av-;Mx?SgKU%y74<E|UF~
zD^g8t>_BOQfXvC<cIv@>`#u4)&>XTV8D_`HP0@3F=YidOtKh+)_0D%?<<0oGQDDfd
zOsCPvrY2d*Gb18H@Yxe{K?D3+{q)?R1=M%B<^09z(HQl2JN6vSzWF}Ys81)rH;n!!
zSVJ=K`E5Y{4}wdhEPCK5YL42QqWKx*CG6zBFW#a!4Goyf$W$K^9@K}mpIa#;?^Vz~
z^@((AizL{@9gGw1i&i6(NF-E8>R=+=N&AL(iXKqe4)!zX^o}1Ny)q#DaETrcnGjRb
zy=VyThh{S=URf4ms+EI=X!<gzzE-Pss%<pWALqUB6(w=v9uBw;QdzbqP9$#BN(UI;
zd)TW}KbsN2+94sEUojNGJe-o6P&q*rJ=R;*NCnX2eyL*N!+UB$aDODF@wgH<+gPBB
zci;o)DzQ(4B8eTIt#c*DtUVySdm4#E!7M8lHpY_V9gQ4V8(p4(`i2+Dmz0zo;piXQ
z-<H?TvhopOE;WT0**4W>1#ph0o4drD4i`L!sWwzx&IF$rAo!<w4XsDRm2{X3aQ&}3
ztxtqW{ssj#c#Ybnu%>VIGuPG{p`wSAqU<`NA!WIt9k}&<F*HRTH6i*En5c^OA>)9O
z()EdH-?<{J!Me5sHGYVMzuvnFk`gF;W<^=qxr>EGunF^9j#ZTf%%mI{DzBu9XW-s<
z_A&oJvqcO<JL}|Ll$7ARR-FQ08J|%uPfMJ$u$aXLS1s)k6&bqWHi@`1t=3&zdtFa&
z@bKX-OCSJ~AtX!uOKf_$Gw$IpTgG7|U9WrO=uw-UyqS%ku2l2d0-3>YbvAp^TIBcR
zH(;^mVWemcsu?=}zCx9Y{%a3ooA`wL?8K>^8E%pNbL}ay%}Xy{XdC7V9_t;fa}_F`
zPyqG<c{H4p*tkGkg8pgcuWd-oPOC1BDY|J>)CrI#zY;0x7tIe1N4VPRb5*sfOjSmE
z`<*jlq6!g==?+rj=<Bd~`<)-Zn4E`|m)Pcw0y~Pa?IT^EmKJRoni+*2mFXV-`K7NL
zPr2M2=M#O6l?}-pIs`UHw28cWX%uoKkBE06_xHyrGC%};cW0&{)y)2VUkurSJ2HZ`
zPS@aX{Lq>e-u>D!Lw3=P+=@1a`BgXg&}l$u&u%Q|A~SO(B-cyXUweCR!du8XaV@Cd
zkZ9lW0B{wY9)}%<(_yX(Lotiht?(2UsIf4Mr%JI7Jy>eJM$DAmBpIRRJ78aLIW}!<
ze%`g3o)aV+tgOU3bX>u0BJNi8(_AS1jnx)wM90T$D1_uB->LbENyB3^MphtJ0S0WF
zzQ?xoe3&1mr-TEkXwYZUf_s{;vD7!t`MbA&Hg^Y-ukmt%nhEIV+ztGyVhq&2GVTEi
zeEwYFg`@YG)4gx0WCDf<=If~0glM3~<!s-bP%OFS$E9wj!~B58?7XCLtc<l$<S@2-
zS<kEagR5OHWv=f!*GxHb$H7Pt9>~xTwbZqL^8oV``bPNMo|iUVzQ5V;`*UkO?%v?Q
z02FSgVJeusmr{SGp|;jkD`s=01t#?7KKiLYbn#Z0CbkH|zc5v+qI%wX=kDF)Key``
zS8%$>tJzs)Oy4k!U+x_2`D+AkbQ~TYMgxaO&Y`Q3;1kfD?dP%F+#$pstZi=ATAq}K
zhrEBUsP+4^7oc#51BRT|WrhpLYr}>R_L+}p#vJ8YZV6y;?c7hi(mLu%u|8wJ@bexQ
z?E4pt@<|YP^kf7DpLIbcMCiTfH1iViYo<_L!T`}>#oLcQlLd$){!tkefB^wkDNJFg
zsG#q7nW%bVnCIF@BKC4`{lekj_)1udg@9hhTy({|Tbhf?ik+S<oA881DIZ9<9^Puu
zo<eqL>aXy5HcQghZt<N;tk0si6$9J{Cs77^RAW=Gj?|){{3lP2z&JDC4-47rVuY|-
zj8g$^ub@JE;+OKJy3p8k*p}#ubvz^_lx^QJpWa;#(?jxDgFYOf@>J^&vbJVLR}aR;
z$FIOjB-va1GP=c4-hQfeKTv+W9wOH1c#f|9J_|sA0F;xk7%H^amoiy!Pw9WyE2}PN
zH)QK(3WY9IS%6^xjp;OO;q_%J+P535GmS-ljKY5B-v{8$_>6+j&!_9V_+0d9llmI?
zlGC*{d&td-Iu)s`jrDb^7tt@Z-L<=C!{}PfHBf2>I>k=N{p4Yfs>&D#ct3{S%d4wx
zv%L%>rjVF+WtmlIN}W3&UK+C2d=&$vHf92}>id#4T);7M+uodm0s^V<O=NYmVF>Th
zJm&}W88c!K$Q2nf=GBC)NN_-0T@87t05{FN)d<j^R^^f|0ASq}?KRtz(TMJ8Pa|EX
zPs{x^>_&w<2|J6Yb#$Z$u^j)3XVHyt1w5-nD&USw^6~KncOO%Be-5fE<1wp%{P@8h
zcy*We1uv-3<zP^45}J3(Tq~wD%Wd+HP*G%t87(v~&s9EvH`mUuyLJGhRv%z!R=lUJ
znvb&)Q%r^7u!blr2VTi29D*citXv-j2oVyA|906Ln#FIk(B}%NB8;0qx)Gty5ki!}
zHraNb;2!Ux+(Ey0$+S}*biY>m<0{-0huE~ViisA?XR{NjkZ1sH{PSNT`zL}M3>qT9
zlp+S;h&@klz**Au-`rJE4ALJeK+QPTsEB@vZ?pFB^z4=@>0$SHFy<|xBeiY(UTR_l
zfNsi%4<@y>q4NHh;X(ZokBH9%=Ygom@v$*+B=IsV_}SV5GjFb6LtIIzZ6W~HxsB{~
zuTHjD7GgP8u}z@tGEQ@0EqVauv?X4%BGnU)n-PRcrwh<-cGQJBMgq!e*Ya6HT-?O6
zTpcjw5Bd8}^Yio5=Ld;bRwqwfyN_PIepA_J>AC0pK<3!kDS)L6`iu7i?=1^@w?-J&
zzdLmFsKIdX>Nr3Mdakany}sl1%|H*xw4gLJn8IE~&rvx?bf?E1ivjQ0e!%}7N9&4i
z-Bij>*3cgVzy^MArXOPn=nE!BE;TP?=o12i{>!g-MFTh0oQH2-|JJP}Ai;FyS@U~L
zA4q|UCMtCJ!-pOR%s#6Ck#nMt%<kMtvaBeU1g!7f`-9_9d;wL`5c)oJ5N|1r>n}LR
zMM<N&k53fE91<Do)-{4Z9~Wm~`@pL8qg-0{)m_27g7@Uk<DvJ2-7Ug_gM3-=*RpZJ
zK|%I)uT^-jTmbGMB+IAll{8APYHq)Cto6fJfc;c4=VKKn=YbmMxUpgy<l$U_4g<zq
z;4Tstl7d7WjZfsZ?){M~DW6ZDQ&iNL>+{fsXWvES9IuYEk^Q*x^I7<GEk7q|Wo4P}
ziSStQ_4D>NI(pR<Zp=2G09_dC0HzWJkUckF^z>W`d|oKq$$+Zvoc@EU4xQ+}0V`{&
zIj{X*bbE~!&<69%`2aP&22v%;z8AS*AH;>Mx2NjA!=URPOUC*v^pGBrJ7TmGRCB&r
zt9t)_<+tDbBI4rGzkSmLs^~LiudvQ1Tc0)kQU+fwIo7qa=kJsUg>}P&7saRJkyxu>
zKAJJaWx%4oLp_7;E9`(;9X*eCBs+8K@~_W+^Ngo-F=hb>6IObBxuGH0(83}U23#2~
zl&1>Mg3OC{8LF#`!4om6z$iMsAOmQb^GhRi;x->BM!B2XlP&Ri5*7YsGoQ`^0F|{5
z2@o=zc`j%XCZZJ;ZLA*{Tta@aKe@BAtR!?@NgG<>%!}y@#r+dKds;yy@HG%`x5X>H
zmni79SRDWvtq2HJwxzhBpyF<HNpl;I=w|=?YOJzHkRhdV$@$Udn%??)kuJQcPyzYw
ziN#P+Yylv2W>QVxOVi_3O5j+%fr%RsUP_^}a*-=7fZ`g$I2openHUyw?I*>EbP~p9
z27n?CTfKR6m&N`V8*84!41ilFD<=ng5E(1(R4)UFbD^RxDv#vh>H-ka)|Pw|=-D6q
zF_=yQhTmhZPYXtTvYoV^y!Q{9%gKq3y@mF29<-sX0mL%QFpN?@3&HB59jrq+UcXK^
zpb)k>t+<In4c532E&>uV(|<k1+|ovzge14HP%Hqs{+C}~Um>`<juyIF`}Z!_6_pRo
znew|a=t4}xkMdNjSdvIe$^&85Qj|vcS&4JgFW{PS(Ps!#1_lu_17sW7>G=xL)^CA2
z{R29H!NGby+6^gbw5g-w<!lHtMW$tdZ$ToC;f~OlWsu)DmT@>;ZSAl@((3p#JQQ-U
zeQ$K;%$b>$X?+JsZgc%!x=ynXW65x}dVQx;h^CRSJk=jWNqEpw*(C9VbU$y3#Rw%!
zoEp6vN(}GpqFo_3(F1m5pr7sFEtv6x0mclVQRm>YU$CnDv^uAfel56V29$Lkd>>sH
zc6}L+G9BgY`#0uO=V=%Y9fkcV80;O)ZiEouS?S|efjBF2@!^NRXC(lfWVVe8sre=i
zTMuzBIBV4rzM}NRfGbxBfOHvEc%s{+0~SB{`}^laK?n8wueQP}Q8sIDRAlr00=GUX
z{wCZAOkfT8S18_&B4m-SBlV8XX|XN|&IOw_A)@p;K~CYWbC=+pa!0H%4zi#4QPFty
zQ0^I_Dc_9qHe!f?$S7$}U*`EUXY}AEo0T|60(YCdYv;~KQv-~-{u~4*dmE@&i99sk
za@WR2v08%;j~CLzlf?O-UyG6Vp)u@ek|ut7#gAn_LI7L~sk6Hn9V`E^b)VKp*<>qA
z5{%hmha=#-ui~)HgBIdpC(r?an7(q4Dp1CY2Eta=gxfh{0KgAc7>~Dbh#MQ>$OFom
z8Y(y{@4IrTdO)0YsIbJLYe``JOXY=$qP{mcTv|B7EUBjEltQ$k{Yb8iwX<vlZLmTg
z=bzu%>IrmlF&z;y>=0!Ey5TUQPCZ@*!<S6`v=#*hKlDBH5}<)<O0#mlJ*t9mo&_NU
zMDI!rfs0lOiOg0ZTA+K8PM3RLV{xnmz{-pobt-c(@!D_7?&4Rnj4)X~%OZvkA3A1@
z|J|MV#6Zv5wL^wz<WY47yqxX&_Uv9?tWSnzLF4RsHP{?d#<Js9=Lb_@a_r7wE%Q=W
zsfxOS3fVHxM-++)U9A(XOUqmY2G-t0jZUP%`~>n~Da5kRuz3G{-(?WIN`e8fL+wi!
zCua(@pwR2_jziZ5cvpfatvG=Kpkn$djlB*{QFLylIX*pYUm$8F9Xc&yh1z%lxC)dZ
z{j5sZ)5CXmzV9ovkB33M!?$0pbpidMq@>~4TBZvTYLmuor4=x3fzt<(&syGjK)rec
ziuzV~nC5e<MJDHiFna|qcJABqA<n<ljCL4mf|eE}y{xiQwQ6JLRr#Y6RZcz+9t1(y
zc3`fC#>h<uz?iG+5mr!T^(=<om8MWafr=#dt2zop4*|CD-DN}tR1m<lzYLIvqc`Ja
z*nHwyt%12+ik0m|3Ev$*fbG0Es!`-c+Y2t%zhvopPp7r!Eisls6@&Upn(cV_2+X<?
z;b57C4lh9oX9$ST{USW4>#G(ZL-N0FNl^B<`rB_vi;hbOs4ftjk3wK3<h4e?0Z0em
zuCoVHTT@ft%q&L1#VQLxj+x^A`HMf$gB6TUFUq=kGyf{0L+q?b_q#JLCUbIPlb`mA
zBGR|<tWJZRnc^&Xj^-H-Swqp&0YiOxw~4`-p{le*X<+zXh2|{#ZP~JKi5;3WNcNjG
zPW7S@g6s%5T9>py-4%FF@T0_CTtu639KmZx!FB})&}eR`Ai1xUa+HRG0aOQoYuPaR
zuFeOH72;PcR4<?XXqeW0z6y`WyfN$J*g0j=(l8d-sb=|O9$AyiV`J*TF?E=1LHn)^
zqp|?BRhanecfeE%eHE*G33-P<dF8mhQ-dOt1x2QRUAYzMcu|f&$0~2c9H8p~hjmD<
z%8;|EWIQy|MEMmxsMA7)lx_e*(Zu&}uAehfFsA*h3%<{X1^z%6@XVp)m=`9V2dt-=
z51R!gAn<rYFGg@Ck@)^S4HD9Fa{8PN^8M<?Uw{2I-7rfxD<2-{v2I#thGt;@JWOud
zF&gUbkJ1PC3jI-<>gmvSQg{D;Vcv20l)mGU{5gn)3nV86>NCEfwjf?d0ViZw$gu}<
zHj`95QqF(Y(h6{PSl=QkL-f1GG$$g4bdLxL!Ss(IL7pQ^*XepL-2F2#Tv<uUe&wO{
z7RxJFo*ucdnQZu|wX4{vH(hbayUfZmx#2xJSRZ14>%yY1kC;vZH$55mV6#r08chOe
zpkrA-qq8s^)?>`(A~WbQ_Zc0PN&Wi6QC{lAJtDV+GZxqZt&~*Ilb3~s1se<1URisz
zEr4=y;J|CQ#i_Qs))Hv`f>?2gc(Z$#`wt^GznHJDZ#Uvr+5oXTb>ozlFI+pS4j&qR
zo&B{nln=05K^BD7Jh2W7A=hEo2hVWJQX^NuBjkd#5ib43dibi<@LTosdDiEAS@dWp
zgd8YUX16hNf)K$*ht3;VSUBwzCM0P_r{8K>G>RR^6Ux8u`(ZEysu0}q02JuyNa>-_
zS#IR`zA&83`&9Z}p-qEeB!YIc9jfg@|1z040PVG)_AO=(+|q2`=%*xPxDV9U<6GaJ
z;^7^C`t&K(G0t1a()xg@zc(7j8dJ7$STwSMiOIuJ_7T%zPZuI4EVRt0sCmnmEM^nP
z24p}4sooS2R2fKgYie$8`xbZ@xy`E5`-)~XyP_QpqPP~Ys;w7Dt1vHiGPv_j<}%{+
z>B1otQwM3837mC8`vURJ8{OD@Ia~k?6wvQXv%E<O@xH@>#2zOV^R4lQ$h6H*paWI(
z4I`o)@kz>D!Kggc7=_9E=J!K~*1$1>9{HXr47(gYH&gZfy1NG~Me7Js7cN|gksVjK
zwqE9Dzd=ReGTnt>1(`dqRKTe@u}&R>u0rDU=g4~(FmN!@L7d3wckj|+^W=LSZPzv-
zLfUL!(KV1JcpOLy1hJ@ADqgy{?7T##T@^+&g9`XXwBYbD8^Bffz+>VZ$%n517CaQr
zzX}bNtE~Q0Ji7OPa{>N^6LJ}I6&Od)HaAt{mE8JthbkCPB*<tWSHUnVXenmzyVy&v
znQ`$sX<vZ*J~P#3Q_)R=VsmXRGH5B!I_DbJ38PM>iRun(<U@sBvca7B6bw`KroqAL
ziE?4(quaLa73%TRn!EUT>{9GF4pZEjODD2cu?p3^0>7AFaR3n@$R(DM)R^WJv+@<;
z;MM3T&l@mNQmE77+#<tJL*W{%BU}vo`2G9CSkXMZ$s!V#Z893IZ{NIWaO>8cs!{~J
z)fp&66F0xVea2luc+9G-w2*@Rhq^Gk>2@y|5t!L>({%qHo1?0iin;g8k0{<6EK1O~
z|0@f679cP^G<=X}veKf$$@fEYXFw-rPXphCKp+^|7XRrE*v?#EJrpJp@$t5F6cG3K
z(7#ppr$c!iv}BkS1=7X!xfsk+1CNB1ykKK}XsiJV$CpVMdUp}C;dIRu4hCU!Nxx#%
z4NCY}0Nr>RE<)OVGua9&F*=cM>Ag<fb)j{BkM7>p4P?|i55C^|hnV(e`a!XP?4=Jc
zUtX~9%_mWt*X(aI7B<>7pu|82Nu+*0Z7A?u-wL{PppgqS0s!mCC_@jFa<>gURgL@i
z3ONiaXAhx>Q0v^WP0w7>e-gbo*g$zO2nz$_lXg|-q0@uyG-O3sgOh?IoFFIF_n}a_
zA=Yg&eoQnnA3$5zJh>^!C^5`3GAI)@f2t498nC9!5;6-OHjw%qBk2!*{6540h9A9I
z5e3Vtz@o5cu4)A>rKis?Ei4o=y<tSRF<TIxnO)-RQG4YM1S3GZy(9a33hi?e&tJOq
z`9@zAq0kQ9JV>{l?LWY;_;sRc12R><<Rv8}k}}~U1+*21_L>dR9i`((tXqGk;Vu~7
zOT-M<LX~0cFmo<TmJ0*WkgfB}Qs>UK@uN0N8hs~QQhGN-;n=?LWg_m7i9D9lp{!$L
zE7JxQ3DYlMNmIFzKBA(uG~I==^_M4{`l0w>vLShW8)xABV0)@&pL=3)ij<c9IhFj~
zjS43vKJAs8xs;qdN(fE*bdqghcf+o;ZBa2fDH+MXFS7QR{A;@-QZCz{yVKYnrC{EX
zYW^;@HvnrOF|BlyruDu*cF9*QJbcWLq{N7$tvgR5NIv}k0mFRK1wErX04=G7<ii?&
zT~FSq?;tHg-|D@%BcN-*+ox044Go*MA_l!ji<E>%TU1;$l|bbhTT(oK`#D%Xe*B;$
zx1IzV;kJ54-K@Zkz}@e^$}LZdz7=}?>Lpj^JH%IWw?NbNK1~KJzTCd3;N0TCX=w>F
zDP1VP(i@}^c3vl9Fn}p#N<$eN3+f=NWYcK=Yr{MTZ9#FF*;MB?AtVCDdx#(Ih$_f8
zoCwM9?(T+h46^`H?}%sFUKzk8{Bpv%Qik~@71mu<Vq#+%ObZwVAz(EsmcDAg^#ZIU
zhu=OcCtg>?UZJ8mHn^vkgGCWYJw=cfckdo;)wEuGd06N34<$QKrixUJJpeb%xQdgW
z!H+QXEY#F0@vvmnnPQcR4+r&`!>}&<mQJ4?=sm!P_^{`J(#F*2ZeNS$i2(k?hwH~0
z8n(psJ6D`jR#7Qn0}5jPL0nQ&&_}l<=c{rMf-x|Y{q5b!lk)@>r5kf<JOrB`AM!Fr
zXXs=*<b?~C8@f*Y#YM+ANMA1o^WPGLJuT0ZmlRKO_uU(&H`@tti5E@h`n$W2lnljK
zet3XJd(4>J(UT#3qEY&aq-$d2Nw!6EN!Pv3G=igUMAY5}hn9-v7UaZ5<7`Xj)ueDf
zQG{x$4)S6ai%O;DThXLZ2_ioTkA`WCW5<u~&kJCccix57=eF%Wl#2555e|!pn|G^7
zm|&T^Sbi`pUDb3hpAJ&L^!V)i5Kw-QqFSFfee7~kQE|?#LRh6(0}S3~>_CWAI)5WK
zSj6|Zo`TKyH>_O7)lAY;fr{OUG{zW+muj<Ep9zEuRO@V$MfJkM!qbgnx7V6XkWM{c
zj><i7y05hWyTN1b1XxS<YZO?0oz38Yiu^t_x+1^Nb8)0%*Zs}L37@gcERhHo{B!y5
zpr4>hMMq0xRbyg2PdD-@eO`DL^`9B%iSY$cbjt*Z=F^Mcywz)Nip3961C}SG{!lZ*
zN=OMGNWS5L{aBKdBL#g+REKL{pXV8?A49^rdVM*-&`3MT1QEQq=g329Tr*N72Zzjq
zSNPzBNA`Gu5>CjQSbi&SXChTX>cbS=j^^p3d}{8TPmV-TlhOS3o4bccEl6<2cDS}*
zz3sdF*EYuK#=S~54h~Zdn%b%|$G$DBjcV$b<YdQ1i2IGb<w?%UlBBu~RQl*&yy&F*
zlksq*rXeJMW23yMG!H?wh95^aF)jmL)-y_I4v5r!4%+)#&{*an9PZYxuESZz$O6(_
zX6C!ZG&tR9aYWksq%qCybyh}(wv#?^4sjculcVtW0Gwl?Hd43C4|!3lOanQU1E6{O
z!8cbeFh%HL?-0$j;N7yRpP%0V2#YFVP}ZXpr6VsjM;j%P6_Z#H*H7W`=oiSgo@!6w
zdr&pk5-*iOZ35L1JC9Hpb~Y#(`1a=4?@HnmzU}6nSopS3o(=_=+b)NfFHG{s2+r2c
zk;VZEAZALlDWY}gaL#2NPl_%Xu9_2eHhT!mVNZp+PoOjCGLLOclYkQSF(e<!I>-2u
zGBZOD$#>coYLwH+W-6fjBFxw|2gB_!uTxVeBACd`<1}Wf7H^&-xdqY86c&!p^IjZO
z0%eAH73<oUHkN?uDRB>89-NpGbpJbFtbm|kK_61;k1S;Oqd)`PHhE9}s}vo51B1A7
zPN*VVVbU5iE{UTlr1=l;#)a_;vL6#5A|>=p*7B1lHq}UKCCavy%>lP>?#`dRiNT;}
zXcq$4R3Co|;A<>-hT&amcgZaKLr}6l9QRM3=)g?%!&~gZJbbj*&iJ~aA%p*YxXS!<
z5Ed1@!vNsvOXr)6+E+|QN-rp{pKb(}$S7>Jk=9M@C(W%8$_i+Qo@H2i4zFLV$91A(
ztM_UWz5s81u$qsI$1ajM#0w9am7R3fe|&U1z-+<c_8jtGYOrNm8dnF0{}IvEnN6BL
z3OZJ8ot;9qwx@PzF>|uBZ$}gr7LEzE(wCxF3i4oDla9x~YHSSg<AxIujdfjIsGdII
z2C-8*h4h(6^>bCJg}HgW8>_RcOJpJXlbH7H9Vg^3c24@o&CKva6n<Pqs-V%k)qhex
z-+W&YDjcYqOAnSZ7f1#+rVd%bV`e1|FO}0ACe*9;<x>vY_~ONjHEWB5)ha-w5ukb3
zSB$>XWM6<deh>hoP<h9MP_AnO^t*1#;UJKkTA1jeL`FGMTOK+(Y7XEV8*gSjJ<DTO
z%<$_gJQk7<O@?g|ZOC)p$>(|zHvkg~hZ=yuo&&nM3sv2c)dv}V?VrcwS8au|a;=Q_
zVW#fJRPRm+1quGl8Up;vhV{+z^75pzvJ4%vk$%C6$vpRsm1~Uh;(OaM90jNEQW4;8
zthC=j)!*Cnq)AStzx#a(XocqSjoy=Ob)wN|KK?y#s;e}2Z1Hq=pSai!u%%R8s9*(I
zRrWKSRDdR8yFBfe*`Sxdagl~c5if)xHcFjs4<C-)CYuI}d1q{^+TV1Pwhavp(Y`kS
zpYzG#y?6Dbe;$O2$u0TO-JuX1eK-AQI;S(J&k3r`IW!0@nWD)<Lj+QhCxe}*qz8b$
z#T(Koo*Bj`f0Z8cao9MYiKcjh*7iTSK!LZwEGW75747z~Tf#)t&Vn^)+Kw-A{!5Mr
zY(qn1nJeuNT-vQ>ptpDlq9;U37-xxUUgc{DammB)m_Ouu5Z4))+dlG9&dy7vWu{B#
zx_V8fA$I1-784_dli-4SL%$<T%@#z&wBqXD>s+AVsYhX~39I%VlKsLH(SCn5Of>WA
z87ZJ!3kPq$e|K+7e~C-e`Xy-F+S=Marq>UF?&GDQ&506ENk4j)&Q0Dead2JKAJ$AX
zhvwOL)OCWggxp!ZVpnU+7P6sb6=H&fdUToA_WZYl2W@$I%Xm~k(}Xi@=;0x+MC<4&
zRocJB#8gSiDAz)UTOsJ8aF+f3Dmzb~9Qj}!MvZn8mlXUc&ZOh90-~&`l<D1+ckezZ
zxvk>rsRbubCKVOQgT?zO2tb8$tB+#m!FJ||(wV6g=@S5AY5J8UhaB83x8?VKW_)*)
z+i#r>wO_l7cTkVUp!>aV>g(%|49y9b7F0;z)-J0H#gx|ZZf^_To2pc)+Xo%2?Kz6!
zd$MDb{9Re8%je#olbB)}8%OuE`eCW{{)HYU8_KUvzdkHAL63#lF)w_#)K7#Gvs{TZ
zu@Ov-M$i~@>%?M(UMyD?u!~Sp{loJC%d)>%KDChE7uQl!<Y7$Y*>dC-W^ZSYr8oxJ
z{QYgi-ES6so$R4WxL&K8YBv36-GswI2_r#VQlgQz8HtWneM96ieYS!tlyO3}cXyAE
zC;wwy{Ym$5#xI}5vW(P(!NxpfsY6@kln1l$_jkb}<wOd}aqRoj)~flXrFrQ9-~rXw
zg${1BgXmK77ZH+2?f18X)qf@g_}Z$gtI`c*ztdiv3fpM9Y+-Qd;8_Dtra$bk=DFE5
z1z2j>+R6&0<E6j2^tNA0@0)-A+k5W$#O&7YDJxJ)n*)8#uTx-73dgALbtnI#4q|;p
zz4ui3`RT<Tz;phH7#H}lPv+4*i?a0e4{yY&n)}+>L46+X?l&OiiOxLIzlDpv$jzx=
zyi{lnpjx(Lw!Hn9pAd=!k<4Dc<m6<zre#5aj#RC1Ig+X*VIdG-SC3fz*tvRazn+=$
zXH@?^v%BVfJ(fH3t0?y9GT3jq+%kRF!Tg!W9<+-K?MP7EAOdZQRt)gBy@hK~+w!O>
zs`>wX^)L1}C^yUh<%k{cJKNDcV!9XqY=S-4*A=7i%AF}GWmAO3@z>iF4K{7-Wuz1o
zxDjzV%F4<+v?zl(AELB1eO@L{Aq8hgHUejZ$CdnZ=jKk3pL}WA`miEU@9!LUi=u<I
zy4B4Br5>Is)utWUd*Mp}b1|A*1;N6cyfxuVK8w9=-S3V3ADn4TLA2BDTqbZ`^Jo64
z8p!h}2!a_mMI#f$x#jUeTSG%P{cSB#=gaUEQbwuw-QZlVI8~!jj<2kq0+#*OkL@=<
zus(=zba4UKg+b{7a#z>cU+N~BnVKdeiNP%|Z=da$Tkguj_0p)~=gw(GczCYT=Z3}t
z0ymQ$nVJ7k_+pO*p0r$dE+*036zb4Z;i_lz=7#1Tc;U)QCT~`VzZY*(IBkdXx<pbe
z1pT5EjOWU5<$K$YKmI~#nmy6%lRvyv8dXyJpzSZqe$Y49Z^HRM_VFJTM7>VY6#b#}
zbI}kVb0pfz_qu^$bJK=d`_-rUj>HBQpqsMCJ&G8ra=Pt=v?@$=aZz|N{g&Xhf(l~o
zIdn!9DtGZO3)0WH>ScM)mAQfT?t2wWzI$1EjO`Y+ET59qUeS$?%R!ELG@1M4TtX<?
z{zSmGL8H#er?}m_Q)p?Swc8H&eQY=+yx=<}0Rl3s9Zxsaz6*@~m3zX^_X0Mh`OJTG
zZCn2Osh70t$<TQ-ca6A5-);`V#Q8?eiQq~J1t)J;onBCXeA`n}?t2Ytb2?KAQnFa1
zmA|W{h2Na?#`s!jXlO`2D7n{8rxA0_d*hVc7@LerAC1$wtZ{C#1uyTRWyb4ca_}<H
zkq%Hw?$=r~F~W4ZM@T+gQ~I>YDUGw$)w`6kZAR<Hio%6ea&_tjlrJ)r%`4aDof(%-
zjyyl89R?M*4T%CA$`^^(f<5~|ty?)J#&=#$#cTfcaCJrS9YZ7S*TAEma1Thn5vpB=
zTdzul90OvD@QGkw-VLD*!U9RzS&~f0bC7UA#%8%`d9*H6=UA)*PgiM_G^7U5;1zS1
zWG;piMPZ23PqStmY0UGWMwL#)plXW9Yze4?&Od0*d<hAu_VZ2s11#|z%Sz^;=nHAg
zv|Jv@=&6n8<fw3O^!}bpzAGPk$~`n&CXt>_*BvmnVkHPrNO&8~9Blm}qo)wCsg8CO
zMLT{8OWX$NbkGL{^oAArQX;DRcb=<>KZeU%7>5s!?)I!IfsX}=qc_Kis~j1?Qs#5r
zegPfl?CAK4hM~o>9&ZAvIx<dddYSzkA?(=x`CLdo;a6fN>01uz>O50W@hq<XM!1OD
zWk%VF%*^s=DKmGw^Uxp?g&>%xdY@5gCGspr+l{f>^pE@HQhJAm*e_!>|MQ4E`O3BZ
z%Yp#VQ;c?ui1xxRuCH{U_(5^G;6;z{={trV-uEdyA|@A)Pa5d!$BPRh{JkA~u%;EO
zf$CEo&wq>b`?DH&wq0nZVOGM-Dx)#7sbc$<Ffg49;uGC3CDrWObFZP?yl6&;iD`jZ
zZ8$(Q&R3*?&nE+|T->$b4FTmxKl{*HN!ilUwCJe4A@AM|q&0%D$Vn)BE9U&B5(~hQ
z@{+QOSMaT>jjpuRm5+XYYV&Xc^}jtkJ1!*R{{4hL-<lc>7r64)UXroDpI|Ixf|$V^
zqs+kIwGMCpRCB3o!<MH|q+OBE9dCltKg0SDLT*k$ft(TE3YsDOOm|5dbiBZFJqBJx
zj~$My!!AqZVyH_97d$9gidTs}_*DP>S*;oUEqD7$BhXv!nmsai0TyOl^u|!B%(3Ua
z(FE2lCvM;t7WeRAbwusD*CP2@sWSU~3B47>Lw6U4I`tLGq~2Dt!RO7tdEs4iZQyt-
zJa?%*6@`Tt!OQ6JUfYSw_~|TtayLfC{?6l^d`IJ~4b|^61-eWSBpCqgWLu$C?oCtC
zy-MN<tX*H9vel;UMl{%fnNcbE%}Q0MfFS`zQ39X0I7UYH?Hwe(8szPN*ygpOUK(uu
zBF(3^aye-hn(U!v%JPKpTkmtlP$P<9RuZ==;h>;DW3^XQ&G*NX?khkT?(B4$G6GBb
z`%o-H(RK(}#dE8@+^?Bcb-#8r#9GAD1c(Tr)Xv)86%-Wo5b{>^GN=XLjL?evz|<@R
z?J@xabTI*OOrSG5n!yyv@96D425x4J&bHiRfMx%wh9%*!21%h(mVJIWnAKZ1vf|z?
zua8Ua1gh3oZOm^mv*CBs2*2J<srq4MOlJHQv`r>=T+{6Mz*s}DP^+7RWB*|iqCx`H
zpQ6^l;q53`aVYB74;DV^udAz5@BMtU45g!|=UTGxKKk=^qr#GsGmUkjS>LCb5)w-X
z$6`cE+e(U612&&u8hexB$5w<==2<zKw_C>j=fu(s%bBr%zkX_E=JDLg%Rh$E=!QJ&
z*`9%o(XocWfg29`Gj{iJVf3ZEi8t3$Z-AV|?_b*gbOW<Y{QVst3tI~bzoO?vT;5ra
z04cU>@`@2Iu#aJG?sY>$!>%MBg4IrT%MA!%B}%rm;{}CukcN8CE55B1@qLnZh38pr
zZcBvxSZOvxRMw^^AXsem%vwc0P@Nq+{~>$y<WEqu?MZ`+8X*o^WTBavW&8KLE;ZPl
zMqua5x>!f<N2jKwoN+~zRleSMm!JPu#&fpRnbTw=o6*mn)@eFu3wZPKRBeo52?lBe
z>*^r>3N*Q==O~nCgN>P)6WpK(2aTy)2~@^_tTbqgrO7zgx?Uw=u(MoO>%N)j;Ou<s
zc?J}lm)L6u-IQCnJ?EsGN#RtkdN0_P9NAxSEe0~s*nr&(_5IU*VsUT!<wK9^b*Jt7
z&NecRKH~fPnaNLIw(kz>rMZ1n@w%ejPm1v{ae(hIRFG$|Gz#Yzzvu1;H9zN;dWiGd
z7UYHDQyb$#WT>_{Od|4jPE%D%pm+S^#*a$aNwCCvFW#?)%_hyLNJ`}MU6quU4hPvq
zkuOZO`!z2<s8vX$jqVXvK95-bC|xIpaP3XtVCLOWA?@uac+h`i7ME}Cu7`ya|CW1E
z8bYo%S1d?RKU7nxj(6&w4fK7_HVr=PBzQBcBQtYd#(nBbTo`Cq{|S%<{47)dS?g$@
zokDkcc?I>mZOVd^VSDPlOi*-GROZiZr7iFc%^mSin6vQzAtQFWk-6M!f;n;nbL26_
z#ok^!A|A8qqa-?6ElMctk6X&n!6f#p-R9e(`dNqM1csH<Mm!*gi(hli*cZSjFbnA{
zVQKRtOTZtzLYbJoaNio0-mFLHYd6i9{zFRTlWs)%FLzOJx<%yWy8tGQa2`*Kd;Eaw
z$oPPi@V;jfOfN)Q-OPyW+7EJReji%RDH~zne?W+)%RsYz#MokyuD*pbiC{Evdub=4
z|N5wFi;~NfkrCvHlZ7CZtxRWHc@Ou3d@ehI2!e3&8%s>kblJ#BP;k!H87KkqY6%do
zIt;0RG;`F&ufLziwgL?&=hyS`Saz)SbbD}q9}$LSR;-!#%uSYKw<^DsloYoYSF?qk
zA+A8bH#Br}`nZg&{x@9Q^caX5TAVjueP}f4F&v1s-1juhe)!1#{rnb>^gsd?**tSp
zL)gO!@UJ||<YREWsclx|Ah;-A*Q$$ehxtL<xw$#$8fB*Hiu_HgHa@DG8g_wNzmkl6
zWrmoG|ET#$r#`A9#|hrsXpCb3!B5Zp&H>6=o!0@z_)-({?YIvj-a<S&g6mo3?&&#y
zj*HN7ec$Ga2TNV8M<LRJC5|Y`d8^f(1K>Ad9I{kZZOxIzpT2f=qFF^2EWsS}HwYz_
zXRxE*=KZ-3ANGJPs7?=6h^@e;qlgi7S8$vxtT8FVFpD2L_ItDzb8(8j5n8bVzDJ))
zhvC>O*nH(1hFz6^?yOSNb@T4)fwuy_hNqG<?CTK><n(9#<s%|}{2-G5f}4PWLTGUa
zP?CFKiP~i<Iw_A=lGKB)bXnvV9)HY&`;S;J^^$xtk=>kU)4*!${m6=$Ifz?xy5F+C
zPQo6NG*V4`$M>@m+jc#=rZG}7AJJlJ$1-&A?w6cH5Dv@~ykW9ItWqQ`!FR*Tv0ZKi
zgc-x)Rm|Z%+K$(7<+hVHp%?C7rf6xYKyzGVp1uhxMWdbiq!-X1i&2-=X1`>vrC~Q7
zmgEBxH0p?|7&(ko5T2qu+fh+h7o@I&m@hqO-IbZPTIK@vy<*ig8jk+Q+h;G7PrX}%
zt&4YEtK5<jaH(^S3j*)u|Fh`P{Q_z5O(^W6DC!v*%1Z;B(xcvL06m>5z4QGxUj%lo
znsxxd2ZP$qjE;On9rzUBE-~m-)U3?uEHL-kzY1gTu}iaG=C{7kLB_MM&H_Y1TlKnL
zyOy4*Txo6!c@yN!3s^=vuZ|496^AhEIvm(r_1bSH0}rdwZO`(XLCNf$dT+Ykxa$v@
zdb=VHibJQ&dFc*~hI{d?aO+qoX6nK6p+5~#0J3rFg0EkAj|xhMB_)ku=237s!A_?1
z&r&3}OrDvsIohtLAuI^dp?8uEgAlN%!gfecf{NjYl*@X5c5%D{+V}Ry$A2VkhKNP+
zHo8iQLeF~?1lylQfF+8hsi^f->pd{0OFPqu5{ZLKQH0x=d&)X?-|Lln`RZNM$m;5<
z`sMyiL!J64sn8I#G(2eW3l~~uDq4^nExkMMehd@l%N>0`VBaNfhkidf(_tP#gqrnc
z$eYNgo**7}x)F3HMRy+&itl2>8x3(IVX6`JozHUq&a|K4=727;7+D=K_wN#=U((Y{
zKV5yzS0hC5Sx)U#a-m(OUaYOHb^W@XpWj{39zA$0T&?(`UcgdA8aIC$)q||{I=Ix$
zs;|F0^NKIit_+$G{sARm@{iPP*Z|fA-bmO;x(v6}-@m0BKBA;C;@Ftm5E0>V0m)vQ
z{Z_!OS@D=TrI014%x`$med#`Ly6jFcSp6<2E)W`Gx3*h)lbTKTr}>hZ2gbodxvjl@
zAZHdlYBhasc)QKWUDW~9X^f_<8I3S$ol|+=Fg7lFTKqX2+=5WS_xDC2SUEwL=!9bu
zCgkz2Ks$D&$!F|<Nx*Pm^yx;ZQAa=n@OQm`)NR`}w;X>H$<=P9U!N)g_&Wq`oNMv6
zr<mB)ZB!59eFw(DMONcJ=#?@DIBTOiuRC<GmPwoQ6)sc{Vv!?Er@UbA_2k8|jI@M5
z1{n=v6+F)&QLB6FYH4{8y9Z$>1;nJ4^#VFU&RK=Bp3teA6dmU^B$yx2R<&=?wZ1vy
ziVEzJAZyO0#SM)HzzJJqGqC6PxAgG8;-`ER_Zy_Pgo5H7J%dzOR0Q@wFu!PO(x^{~
zw&L2Ws?EbO-CUc*vi+|NCQ~@<8Fg-3P6}9Ugy!f*I5Skxc>j}<W4iyF3xMNn8YgEv
zsT1RyDt&g3fQq;m9+Q;mVC6q`4R<TT3&thi0*Qi!qh<&QVJ-)3xfqKgaUIRvV{}y3
z#$<CDiAvb1FaS-BQ_sTvlKk>=8{Mx!5k?ygn~B9ex|5U*(<P67?#N19Q0cLaKji*-
z`A?sq)fi&0dZi7eff->9Xgc0uWM$msa|GKUFS@{E*sHs@xEPL#Vlbil&41|7_f{NB
zt{4)8Q&UzoZ*HU@i&zY4N`jJpu@{cv-i=~;lls=Df-1S%QpA;Z$vfBj*|O46^|sNL
z9}SP*CkVYzs)XVjNB{@M!EM^%M_jMllX1|p8!5n5$wJaKTR@LRnLGb6#}kcWk3-#(
zNyflt{C-$4;kiRIG+P_H%SAl%gFc!+ngqAE{a!;KEt0_%6J>k2^&;2wndXO#ljTtp
ziH{c+`MIo2L%vm}p&mD=j8rZUeF+cne(29$M&0C9V~$H>lMsC0HqMU`D4m^$bP#1H
z^#TT5#cGh7)l5I$Nl6KbFh=F%Ga1*B&oy?M(PyitV6`EvhQ_t+UQFa;x$O}p(B%92
zDQrdtC9=5t(iet`l9;gX)U0t0?aH%Wu-mvpHpX%oG%9_4^0i#cOYjj)N0G*1gY_z&
zq`*B^Px<^+xpnAB0Vw#ShNb;y;NB7lbdWcZ5Q)4eJ{pEB74m=TxJugbjaTvXHSCSo
zNB844$Ho`?$O*9mn{v>kuf-DAgG<NW5jFi`9DGF5=scCK0yk%fItf#s#gSLjTeZRB
zlIg#=qJuSSqtPRd>^qdF^6P>=Zo^;5qchL%s@;v(;;)j!lob%0!#ef7cEkYPl3p-)
zD+RYiePqQ{lIDmd%@+kQ&|pVUeQ4GTFcFeMaMtnQ9`6R#seph&9mLDQMwqC&6E}VU
z8!=+zBy(+XbabhSC<Nt~FEpu?4rEs5MBSO_N;&qTDDuP3GUZkPuTDT)cwn6SaNmae
zOR#6~Lx=R!v|rsmdk``mIL;q|Vj^hmhh6S#sBCYjuQ=YF0J(a8E-qE#2};?JC59G)
zUX4`ISh^0v7tB{pfU}Ef4Rc)A1;pFKNp-GJZX~~n&}sc}2#f&t;g}X1lW?Eo#X-ka
z<$x^^t{1=Z1;|3d)-}4`j3XZBrdM?zovpfHKmKUO+X{wEP(Vv^r%vIpMK=3egb-AA
zLg0P1*h>mH$IVflW#I6MZ5v&O&QfasWx@S24hBA83KKmF6;dcHpv|4bfkkZPv=)Co
z4`N|a4P6F9Ry<=9^vC~@LUJ}0Yl9Ih4JKcHraM2i1L5sguP$uFf^VbC>@-E10l!)O
zT6Nts0-AS1#{D=L1*UczLa_5+c!qlc$Lsf09gZd{R@LVgSVH%@u8*UJ4i=mLLH0gA
zvEVm<Ggk(Lc1E6wZhFW0%~LA^fg7)OR$FO&rF1r5dM<<LA1+)5Y+g<96FXTHTFGIF
zhJyR)oQ$7mS3(}-C~@wTmizLnaR0H6jO7_{XbZklwZr*gy3VnKC_!#q9_2>l-h!<A
ztFxJZ?)+W}EbW6BAeYy`Md4e_^<wG66#gc#Ce#@8zk|!hd0(<+iLW<ui*F2<4?$mS
z3%3%`5b^nuu>RQV1^XUU6E56esGo5!88q9mPD7P9F(RMorr$A~)Yx22OO+q+Wg!@4
z()C#=%;OUJD4++fefD;B(Zo%cj6_#3kK|T%=ct^pQs#XB!EwBAS0RjU@${nu%ILn8
zwVry!!FnOLt1}z<FxdLkw*>O72W;Wf1dj^SyuE~A*6la(IU3m{be_n=`v9`thw>e9
za%mC>X0J5Mhh@1r>0#^oBTh+Wh(QSV+|8ll<;OHh3X=)U4K?c6;P^FgH(ht_wME_9
z9F>q(+cw}mO4Dln&)a_ailpB5%f&~e30d{gZ&2+6146K((9pD=4I?mkRZ<(t@)&Fc
z5>^~^4kIvofwnwP4F)X$7>U=t&fwb6r;31<k|cW)OQ;~d`2baTIMj+#Y5@co{NU@k
zR`Y)s>Wj-@2%k-%+Be5cCKnf<1x5b2we0-I_bZp<X(2BLw;I?F%W`7|jN#$yM5#^n
z&4Q8BAs`m_byCgXY;w=16}~Dl@dU6slHhORNW+Q2Q8iFIQd}^paHQu!RUF*-3J&6c
zJL|5~YM?_twBHrJ=z6M^m-dx`WD0A3W^ExD`B5AM<e^xZtOF~CiZq>+z!lY%R*dUN
zNLorj6lg+t)<8&+@tDavc@pg4e_I@41e`wU$%A_!d%Y^?!dyVcX2~;OizY}IOJa)+
zI#vlg&m2?CJqae-9Ca`Yaq8>b2jlmUw&Z$sC|SipyIieXj+FfpYz0qwymtPt_G8Kj
z0ay?Bp4GUKa>BR;k+t<TC|xeX*4{o1p}gabO&VfhT~J3sk=ttx^qhXq0dDLW@#Wqr
zuyv+%(ENbIT*g{8Ps+$(d<o0Kvwi$m3yjb5FP}N%SGNd(6!80-E5Xo|fLCPf2(L@&
z?=B4HaB#FbbPAn$Gp*O`Y60=@(<edgSG79K?FKTl0v29AG=GNP(;Q6Atx!hLGo(KU
zc-9@WquE<Sm8NDj`kPps*}fB{Joon!ClmTde#ntta;;zyDwA=FHA<6}_jGpZn|*4h
zVL7poAG{8&_|hhk99RF%QC!G5{k=E+J>g;30BVt+MoY0AZBk>eC4(WR<+F{CIRwI4
zkK526OHBO8=+p0RZ$I!i(P71+ALjIMziw7iEoqu76hJawZ{N*61-U&bH}`_)oI@xa
z$l9K~!)mMHfxGdq`ufcH=6U|A=931&{>IKlSVx{-^ujX2O}YPH--ZV!2eBKE*j+|*
z0q8Jb={<*=ez%3V3Cd@x4y_h@&1Nv8yV+{fQ&X?GcyU`_c|ouetNR0xGix>t&CCSg
zRgEOTtc#t|uR{f?)@uv<|5szEAKukjcq(AEK=iPMxwbhnIwGP5x($9<?2Ep;0xQ0m
zWIFpUOYPwo2N=S{I+r8Bpa~s90xU*Qbp3nUslSJs^6u`--~p0hDhkW2Q_D&~0~v%c
zgC8si^I0$VKoL9CXW5t{B0KRP8f{OW-ub-ii4z!N89=p2FK-?Vmu{vi0eOsOJ^YP&
z2MG-mH%t6TP!j`8cF^&UZa(Z9EBk5>^r!~_4yfvEYqVmZ2%C!{NbZm*CT3=9MjC`(
zBDb3)qkVmSR>6n#2w?rf5$Iwd4Q#HYajHmL3JV=w09}WMnKS=e?R3@|&G|V7!fm-3
z`-0ovb+EXkviswWw%gspfgN^Xp1=&VDro?iEKwT<8?K|UNz>9o;29_?DXBFyW*sj=
z!IPU^PFbRCPVlqXcYFx-MgF~o87J7|C_?9`_Z|2a05=9l;A*g1Zcy7%2nOs5;7UUD
z-Av%HX|x;Q^*du%@Id$ol#sn(C4)W41uo(qH`-@xMepBlY)Qu^=efG!m%kD@O!9_m
zF<}f~not#5r7ez5hJizZ_sF7E$vL>ibCQ7DFI(YlKb^Pm#tdMwH0!%&cZY|p7s1%b
zr7EnJ$Gl(Qw)H~<WXU=$MavS>TzhU_ZmxoJ>9AK@SC{GU<o7hCO2Eazbx)Bw8*Km8
z8zTGBa3uTDS3Cm(+X#}gOj$j~F2pYoXJ&X8fhb4&gna-Gu_>lGC_jPS%X1B4(e-=*
z3-N0A%>2010&tE!1vlm8;;7h457(0{suYTgXWJ&Bs(o?&)%+0NLl5j4H|w$f7#vY0
zo%9uj3mjnJV7|KvF0cc3gS0F*9v)ay;yr6TaVv&V!4UwTNrP~TjI#v{;Dkk>_@~Ki
z;sM|UV{-g;H#hySgOg6QW=MKG<J`g%s8xb0p0iUPv4smnC?D4vbl8$$lvISGaKII>
z4yv-wG>W}|pklpCz_R8+x&O>Vx(gtAqU19YqT$E#2Wr`JfHo*<+ilJmb1F#Dz8yeT
z3=?H9Fc)VFvhs%}!NO#2u|N!G(MBb}+e{Nd`YqNLZ8OrSc$NuLU_g8F#X-1Ro7Ulo
zMM?R&>k?N0Q`L9vGAyeq9fW8CC&@U8KyW7Ft1>dqWo9X^IO3*fXJ0_DGGF{5m-V>M
zr7cN?TT~f7+PV+4voSNT2CGZ~v|9t0iTz-!#5_FPIW)ANJ8q%*PonNKSJ9?4a$DOm
z?pVj9d?oSOeaH?##;Yf?sm2?JJo|tX#{Hs^YhSVIuq}um9VD{)qmv1QT%E}tD4oIP
zjgy~AtgCBY1XJ506Bz#>3aeI2SNl+PyowgFbOdpuONVhRy~Hb?wK<7=$(`!qt^{ry
z2hWgDbLaJIxVm`mFcC1N+U%<ee8tcg)wTMA>blBkogg;4<3p+QVBg;#;J?r~z2C`?
zp+w{I@j#{vM?ab$F#(pBp^mxh*ROP0(v}}<_`^v!0Omp_EpB#P4w`Gd)FO_v?t+Q&
z+T9FXv&CTKrn7GRGB6%%ONcBwqS+8Y4cBU3VyL-G)wxRx?1f-TE%&QK3^oBh?*d^l
zRML<4wmy!>m<z_D${t_e1b@S+4rCA%%qIxT@z~I=EQT7{3$P0A?T1zOr-=ATpy&uv
z*sF>gY7qn?n6_quIbp5jD&y1F`B=*4Ep1Xc{NBYJ7YvsLVolCv`LPFzvZT1<iqhql
z{>K3=>)j;;5#Z<ilO@p_nf}XhemHCzP*LB^z@dBFkH#v@QJTh~6w$MY^HZ3H$QjBV
zmVuB}&879R4(rB<Yrca70I6W%1D$O~cW<G9M*I>OtX)ascADKeR90;dY(T*{Jygbd
zpr^)8()faCs~;EbM=|>jFP4+z1t9@|*I?+>qKN8hPqizcH?uw=l{r#OelIs4A7Yi-
zvHKkZ1D!N72u|rQ!X}C>l%&{$fU~-T-@=Obyw{+IISigB6Zoq-T4anhqt3r9sT_AX
zI3BCWs3N($yVryVtW<pf;S7sMUu$Jx_99XOsz7%4hrdzkgLtVNe`EnM72f8AyA>P=
zJu|buIhqp~N=fB8^;$0$msFkNa#VqjFyqO~%M0(2T>tWLQ#rkg5Uw<bCGf|NNTSyL
z<2<^lqbnUGFcR~f7v=JXp-O?yIR6V0t%@5pL-l<Hxt<OGY|dIZz8>aufB#{~+#xWG
zUhPW-k|Dd4-W>>h5=|pY8>CFadNW=fkk-G!IDi+`iZh4<(Gy^`h^*s=8R)W=UgyM)
zGASI!QDneXm?HAm1EkYN^+Hn!QZQwE3zbfw5|0n;s)KbFO0X$PO#rT`-~E*-nT&p5
zNY&=sYI5`7eMn!}T!zh-Z<;vXF;>`%QfjXGD6GnWC%uwd3xc^RGKq_xXTb5}Co%`|
z_m?NM@KeQ+ulz$3F_vj_O`sK<;0TqnN`n7m(@J^{?RE9u*bb`v1&g%`=X-Kh+g0Yn
z31N%tG1aK~yn2xkJDlZVZg(DTT;*UEPA`E~iPGU93Ks?`FM1p8Lh1K@biDr$xNDmu
z{K$~~ry57Vj5i#h-lBSWil)c<_fveekXLYBzILDfw0Zp7@s{pweCNXefqDU}Z2e$=
zE(;hyF)7c1Q8oYi>6+Kc{Aqpw(ZCuN7Y2Z5E#Onf3ha#OeNjNut%0yCq!~33Z78Zk
z#jAKtC<=ih>6~dK-4InBz*ITy-Ii1_0?CleGnR+$iAxB}C(Bq5mh+E5_xKvPfYfFG
z&c1TFr5xy@`-{d8<eN>=Ka%qNJ~2UUKWrfq?;k)acL6Rz)oYw(9@J;00Ag+&THS=+
z4CaaGdq8TNcHLYQtNkEj?Z?W6Dfdf3=QXs^*6=b!haDDMV2<SaeCr5dR$N_&eE4es
zy8$n98=Tu6EFyf2%J@|HR|V|qu4r0{rpx~Uxyhfy<cM$^e`s3*)ez=TvD5-z{0Lkb
zW<t4UMKFNkk4q;8JvjBqp`)NDqigZFp~Ba)+8M5Y$x!*Dzu0g8TRHUx=2Tas9k%RM
zs1D){_gM~m0c#LQ;twk!;IDy!?LqV6i}S{Jd%oTWJl6I53H(c7ZfU>>2XLzEXtWkk
zGam@|DTs>^ZlB$&=5AyFl#BNEL_J^v^YVIt4V!SRg8ZJoVm&J>5xECHfM@y}unmtu
zs^R|dq9VckT~^|!;StODt;PXYY9HVea5X!-3^f2?41a3Ng2j)QALJ$%#HB?KOG$Bw
z6lyb6Dlp=V`Mg_eBwa0H5v<k^vg2=#$~zcbl%IRu-5sxoLcz~2VjVEiv#<~<uoFE3
zQ<1QxrMEKoYra2paCjLM#N|6*fFG2cl2V4sO#$={7$ID02w)#dK+(Q#XIImm6MKKK
zT%Oez1fJv8fRVyyPlQpnP=)6lI2iKk=@%rDPTX4;z)MJq0cFhg5P!5fAovExE-!#d
zY|0Z-d7!`huD~@OGr$#o#K?=)0Z$j?&$#1o`0V%LnVSX{#8jV>kT?r2esVBh9K3P|
zMr?YPRRNd({J=LB;{qQ)Jv;7bWaRrKD6h<5{_8;x0`pr$I=O=98G!m+!$}xX?FT-1
zXiLlLLno)#<>fOyFh7D|ng00-{Lp;vPXI@UFz}r@s_gFVG+3@AARquAj(=}YpBZL`
zS%wVf?Uzg2BdDMXOF__eoQ3iM9)S6VPlAXjx5!Ms5m}#WiEaa+5bhm(durlj<p4hA
zO8`NH09mCTCLYi+oPz78uGPE&++I>sk3KwpL&N2y{Crtu<?^IL_dft|kO6=S0mSIR
z<NsMK-E9To&HsGifBn0U?&n?q^77rEuvzkdzy3t^-`xp({@t8m>EA6G#-4&2&j0<t
z@7w-W@%RnTznU%_=L+8a-#_HC$iM12|IZu$pC|s`56k}?mE-^Yk-&fd&*l7|sPf;B
z#sAxJoQ?GJ5;3;@$iZ%66g+kJZNI+V*r0IW@J0Ei+j7l?g_y2&Tcu+W`dV6kT3Yq_
z%?>dF<~KC6?PK%u^N$4@72I@dFfiCxv;E5DD7O|GA5o-CY4UjE$W|*-eX_=6`8?f%
zQU8ibAYm}h|9G&MPaWTS{2#CU_x}ie^6QiT{@OqO`{FML{w)dqpFh*O^N)W``~Ux+
z_<!e3NNR2QL;%}~?L0h^moAxr7(jln6ZapJAF?06t8lBFQVVS*A#FnggY=}Nt58r%
zNJ$ym+h+*v<>9TN?_9j5x{oj5Q&DsFQ@tZ}w5`$q$JkeZMY(os4<T$tKt(}XLJ%o~
zmK5n!1f*3&QbIZhMFFK0q@|>X5-Dj^Lb|(KI)`TFU!&hX-#*_t=eqv6+-@C*dEfVm
z^{jQTweGv!Hd5qu*?Edz_m&Wm_$oX!e@TYjo4b*jIFeFvBh2YSY+>rp6tv$*UH6)#
zm#5fCXJ(I>fM!feO0%7j3*2nJGu~`Yl@p;qCT)#)>4fj4vB-TjOvDmPV#)t&{1LK&
zq{JQfuLb*7#kpK!@aIIdzTprl<4)GZ>jBva@9#f;Twq|xefRDR4bC4El7U<-xYGBa
ztQivd=4W!{{28ZSxR~9EyWJAg@eO5ftWR^Uk^BZi*LRIfx9~=L3UdCwg|<SoGLc!q
z;Q6y>zwHxvQ@U2FKX{Pw_U)+y<N*?~js5rS=w6JkB<>jb$Ni{~o<!jFC_H!&#mvHT
zDw}2Y?^*!3FI8jQPolFkGUP#3um_-g^V5Idk)*M)RSdOF*H@=-J|b_*m4Zqw?$+lE
z0TmJN|9Z6r!Vd>$5x=mdM*ns*3;9HE;U!+4C>1(GUQ1wiB9Y?~-X(7h@yUST;GO8%
zQjoiZP)6kWj6Xa&h)Xc}{a{M(R+xr%(Zsr&v8`VoaKU^7kC3{$`n#7tJ{RcdmK`y`
zF$m0~A+#^_L(WLl5^SiqL!<OIwoFNyncgtn=E@DrW2P`KZa#C<OeNP;9(t7Rg1?U*
z3K0`=DL^5|imi??wnum%h2bm@`q}KgdtY~}{l@7Ff7Rt!6u&{JIbhW9-D6g`%ERM?
z6xSm1PGjZc>p9+kkbsj>PS`5hUXuGg!Xv!@K2~CG*838ekzJIN9#@4WS9`&G?iHao
zLiKIyQw?S1KxSrU(KMU{EU+Aic<g<?%E@WY1;aeSs*|Gy?{P3Q-v(_}hHerP640SZ
zhp3NoQ2g(wGa5P(jZSCH;xSvJW~4skK45N7;Xl0U`1xbC3L>WDC&K(rp{B91zM}bb
z^l9|8n3mYrq<iimd?Ae6Ia*ndjg2egB>*Y{)<C0kZ{iVr$fTqskc_p%jt`@6L-}w)
zY5XTFv3JBE_TQy2Lb;Is6?G?1)G^k-;CX99QuK^AB8C}kQ$~@$|6g@=j_(?u2=p)t
z*-8?V(W$!%Cr`ngc^{ku7UDk|chrjpJfN0m4@@0D(SP-`a0__(6Hg`aw5>ht?IzGa
z#Yb%uP*pkn$=SK|gJz3f7NSsjBk8Hi(vz-K`k*(6W_`BS!_Jfo!YYRi7=M3TxFQr_
z-{@gfI=a)vj^OUiXH|zZcMj~vdrmvnKsMP4w|^`Fqx$FN&Gy!G4X^M{VAdxab_Tfg
zDM<|}d`UzRkY(SJk&~lc1YSXq{!`m|1V507H)tgQ#MfH5oI%gpaEY4x?&_@DtEKmp
zRKJ%PRmm<{N9$<d$?UQA;$OWhJhSvn8;l6~d&=*0`kk+vD}KCwc4Dhq2R&1twm*#o
zLV^qQ&y=lhPq8Dei9{e!Zp;~;hnq#tHsWxP9sd|<v&Y}RfA0Z~G->+wF#<D%i`plq
z@M<q0kaBRd{ICIl<*pJI(1;_LHy}$fd3YM`x5NLowDbj9+N_!yNoRvckCH%&o5k<P
zH}qdIo=30%r48;3w77jukfCxC!W<Vf2rNZ&vw6DLNU0;dsic#+4m{N&%lzoo-W@y&
zmf1a8R(~YZEgxf%|KL1)r&f+G^&$wn3n38*#-ZY8OYaGR0$my|{_I|V2-ud6P1phd
z^^)6I7DHUTo_ng60F0g2aJt{CS7T~75$p99MX-xhCnqOY%Rn?_1tf;8+Tq6}S+X)R
zI==Z3n}Gc~f1XtVv@L*%?j7VZXB|Xhdv{^r_m~*`{SLYWerBf=>o^*=Y%nUpz+Z8U
z(-=&xpgn=`XykER7#-y)A}!3&uI<F!xIU7aBA?Z_Y@eCZRejiDJWsC4XaOnD&b(?&
z(>?*BClScG_V@Qsk&=eDJ`H09%^v>J-&@&C=by_aIa@0WDqo@ZYBqOz&>g`|KaG+U
z_5O-Kkp~BFjr;t=d??0Kh3&dp2F0^L_!tR7I0%GlGLWwc$Eog?x`C0$Cm;ZE-bbbS
ztt{^^^t05G!w%|+{A;*#2AMo`zicUf)S{C_&(;1MqNi`slP6q+n}*VH+eX^MU*k<q
zHtg`!8>ZdD$e-=)+N!E##ODzfnTd&#U7doV0<(W^8uQ<7I#}%1S!(Kq-*+q&Y^QmN
zK~f)Yy}T-p&>K;a8NVS6;vHbmQ*dh?A)&6Ti-MzKSJ)kQtN8eT_Gpa3pOtfzTCF)>
zN2j*4yUwe{Jub5;fe_M>p!)j3y%u%%SxA*5k9cinFcammdkC`Xb*{7@8R%2mMs96w
zfs{-83qtR(`(QvDqX?Ux7G!2*_+uF1RKN|<pVuBRxX1&hQ`!vn1rh&W>-{#qB!U6T
z<4j%3rGbp^kb4dH`J*3DaC2G^kAQ#x%IJV{s0Eg|%AXq@8M`H^T~8Z^_57gGh)3+L
z0jIaQJbu*0)zH?*8uj8>#q6P61HB&vfviY;@3PEzLZBp)XA6UGxeW*QKM%>HI{;Dj
zfMsxw2CGpcSg-lQ1z~rh#^@cWze?S?^9s!9=q$|l4RM^2^jiG+p5?hn91zTfu>xUo
z1~hBK_S6qaY;5>F)ph&y*>0B>TyCRGOLPl8B7F!*5sq+snfKCVetgmoO-Z_|`b^xa
zvyVAF;iJSWPJ!aea^+2SL<VDTm?V55Dtj3!YMU0Yc-}C4f4^$XpBCx%W@@nizRQW)
z-($xumW$XUzNvzkxER}-_Vp{->T@8W+F2V{`+@s8FDoqO*jKQq7EE^Q(`h$C6_G!N
z7<Z~{BO=R>yozOPRxa%`B6=cAoP@T$it7x#+`N@mUaDf-RkX4+?d<4BXW`5ZmB5n}
zYie(IW`8N-R@re^D=YjzruL((K&*<Gn}c(t>kb3LA_TV%JMK-N^2T1myM!o-in<uB
zELZ*-z%5{d?Z8RyN>aQF3!C;@@@sserL26qpT(@}x6|gh0S6wwiW~*PTFk1?m{tLF
zrO+$+L1fRwJhp8d6B|<{F2`XAFXiXwgIl(`38@7kb%c65Y9|LYIo1Vqz(9dt23Pp=
z>ezFEJ6iPpeMjg1z9R*YkdMOI)>+V8ra1v0HM@<9{~>qh4yfb>E}i9T{B4HHF47uz
zpIG4>oi#0v5=umLNTPP~sS5LY2BNxmDa#h;$-%DBT|$^$f}RvF_hWfjT-?e3xVr6m
zFzu4Z5A`qj6Bnj{DKP?5A{ly~o_+<R56r1RO#iQ|g9+4BSD!%BCBW5F|6F|!IU0iW
zk{JGELoW3D>Q!PB9fyOE#a>?!#hD0pyz>aYb@Xi@)EPIB=)w|6Hp9aC`_U0}bp^W!
zb%{TVg##7~6&&N>Ek@nGeS5@&r~&su6^&l|{de!)v29TP?SN+Rg1bj^&Q)}BJZsp1
zP99<QQ1ftz={;FcP=4GFxO<Y#6(D<682HZxdKb5+(E)#kc?u?;3GWg@Mpm{=0_Q4#
zDmEX^YwsWgkNsE83j)J-bSZ<B#&3r=BOrQ%ZFk<;N$-PmZ6lZwq6p{O%o1n4ik-Uj
z=_4iyi3DO=MB-WKOb4FDTAN%(c*w-rf9~SoDKOX>MuA!Q8{QG%upE(}L;xMzrAv}<
z2KiF_b`Dgud+iU_*KI-A$X4tn+u1*-JNVi({kdHRhE>gVc!b`vo7Umt&idtwj;G8k
z65_1{VkeK1EN+}bNd7>@*z$txoIq^Qe=L4JeDJfqeZPIZdWPJr4Qz+Rd&C*DNmTqc
z&hvvll0T3B3LLy8D8V;u-!El&A@MJB@rq1qcRui#(&WM|VQ)l-{Fk?JO#?O?L+pZu
z;BM{C!}bGJEqh5s;(K_0+H-4~D`Ed(93+2C!qb~w{QdNEbnx^PxTnuuY?OTTh=~;E
ztnv|Pwy(r0;!FO^qt6I{;9|AiXeL_77SZt&wNt5iI8!f*ytGe&;Hv`h;cl-#i#h#&
zEao4NaEqC*9~N^0Eat+8z#+-R#I*Xnm+Ko`2@#Wvn%{vpz=6>ZsmYu6gHUMk6GURL
zfSg@hs}#xT5PV-yo@?*q{d9+EF!SlKjUW=D`wJlyq}q>Wf#dCeSz4rjmKGgu2Q%Yc
z>UasUVYvjZ+viIt-X>gE(q3IhC$p>TUfw(gF3kAn!jB*JY%mH7oR0>ld720jwDNGj
zQ+z;geB|Ohc_{8sc>&srTEJ%~U(-ME$HjU6KU^F>F5IagX&=amzyuI_OOj|E*W$uH
z$*s<wbBIqSf2LAqT&uyxE?45ols8_D`Mo0Y+#x~14~dD>$S}}=5C*587`4+1tM;EU
zV<HCUL-C3Jxj?|*7XWF6Ul@;>pJ#tZie|E?_-Spi-FY`c%*8*;R_uqtYI`+hDB=u4
zH4^1%+gnwdM0nyv*DtsVm=f9|n>6fydiFTCIC1i~yB4DdPJ$6Df>8HbZ0j6G-_TIi
z2RC`G^1b#)sDBRNCyieltQxnJ4Ct;Qgj7&F-!u>B>V=TtUrizqzaP_j`Hx>B{NMZ%
zoYkdaz<E%KrF9n&SQ&iD#1mO==hW}smHMwsc_7sg5F`9C{AVd#L>uojK!iF`m^nnO
zy%I}1eT0XYK=vQ}{|(yHe7ZG!902fp#j|L(Z)C+E+Kb^M194$>MnE54Lzpr>>Jr{1
z#77>@!wHn9{f{__2WAe4^>Ry3rGfz>gm)D+ZWw;Q*0pgajr7l1Hi9#0pNJ8<*TNQD
zs3sgl%+J7w5~(xYf{oB4V6*p(|F|ZEF~RK7B2$;}{@X>OMiPJ@4c35d%>5OgtpA^7
z@V`kZ{=To@zj@0_;!FPi)Bp7w&5Llh|Lfo2{dDHbmt_DjS$z&VfUJ$yMv~L8LQlZx
z|DQipqaYly#|tv+>d5Smz^=Q{&1=U_2r<7L*gNlWi+&z0P`}W+ef#BO<6FSU*$3jV
z5v<`65fDS*gLah}uwNXY`-6tc1tVn%;4-%NB6!szSwk49j$Vvf&#%b-Z<ntA5E=@k
z<0kAMdBr@b6%dob(K9oXtL<GI8*xB$=X<fS<*2Ohx;@v~RMx>25`TV#3O+o=Ufeey
zKl6dlXBFjtE!xLVOgzMaN#JdP!WgRp@Ycmv?LQ5w!eVG?&cbDDPI4Q?uSUMX1}gxO
ztD@ptVEb+RhFeJg`PvINeludh!p$9?V#Pg>Pw2@Xw4ki2x+5}bUD9lAWcz(jq?jw8
zC^7R|HzDFk1~gd1V-Dm%BSSN&5$mBK{|iNZGxwgwA|tSUJJXzpulH7CFT1<U8yXf?
z<l!np+@c2MT+%u^w?2dyNkb+$qq__W^fIB&>CWI_d3ao<UV_)b8+c2B1viNQ@iIFH
znak5A<)gVUJ)PSNkw2|VXw!hqmGkoD*Rqy&*F#YtFP56ldu#T3oVmF<5JhT1P|$u6
zRkoUT&FMUX6?}ws3JNy;j9BZKbSO#gcQpXerC&v`6?)OBx<2DBSTW^?|M6`DBenoe
zNcaWvA?@jf!Fziy$J2~9=HKwk4|Y~K!y0iCi&dV77VrjUBc$X!Bcqz}|8mpodax3G
zzl>T(j#f#6Ok>l}pYPyLFui>DNy1_NXPdjlLhtl(&vku>uWDi0K_q5==^{j^ru+MA
z#fUhj!PVv+4<fi@K}n9t#N?T_7sfFB!+E7p@N{~MpWUi!aK8Kaaj4sl^7aGh&D^l)
z&-EE|x5+$3Lf$!md!P|i^|#r95E9HKZth-Njo6aby%2A2L|%egJ@5#jAf3JUQT%Dk
zMX{ZM<g%kpPBU9R_orb!Z0j>)cc-71-Jg1=NSDioHn{aV%0a<2tL&9XFVg@=>>#Ux
z$kaP)j8v1vl$Ah3k?AWPwH?7e6--E&H}M1$GqZkvKKt&y#Ldm;E92Eh5FGJcLKIF|
zZoPU%7;@0mqzFhy5Ya!DVNH8oeLV_^z1f>*B;mN&qf_p@)&;dAppq5>VS4Hd8U>&}
z7jayClEKNtqvhn}6xUA=pySR;P&+YZXV~Vs5S?!sbOZn>v2!pJrgmRTt6mB(CJ}HV
ziZ<gCUUj#F8_vQ2rouGv8Q#?P41D4U^8hoV{&cQCbSC)ChY#m3vy<n2iRWWnQnPQM
zLhzZuL1H^}=T2c4wA>`Gj=H-kH~)N))0<U&A4qijO_UVhhKCm!=;#ci6R;jh#m|g^
z40KRYf!aJO&t}{U;Fuoh<B63yR|DG9b@j#CR#wE|IxbFplLmCKGhS@)Dv!9b`u>~R
zTEnubx3nX(U%s%o&AfLvzX($&@wjA|R1kSQ>zh|XJM2^*N6@DXMezmoGsp(06p#fH
zjh?PlC38ML%lCL}o<f^F=Y9y!bOk>Sz-T}0e5>#0CGxBK<XrCB)9z)S3!zt0Jq&6O
z2bc!3k62pgzY^)CIN`A#5!gP4D!_udwm5giW|25m&?H_$Vh?plD7iXtJJSbWlEiLz
z)Y%;17{hc@#`x^GTh3kbMGk#BrkQ{!>E=Iv4gVzVgIjF>deO8%EQtozG){4GLkM2x
zJ$NFO1_y=RpnrB7^sPE=NzHz~`^I2Q38N7Ht|PT=$!j4slJ9AYne=D?Z&d~{qlbJb
zaQ#~X<+ASk_wPf4#VK6&XCs#+u=~8kMC&&j&K<cb4d9%lnVBcjaV7b#y^$)as#;**
z<UCb|Z+A~|?i=-{AghAy;S_ijGg?(Me*pFaxYOCnM^%|65h|2mOFs$#@A<Yoro??$
z^>{0x84S~LN*~1h>APcks3Obi&JP@s8St4^a~$J!Pv*@cmklMAFL5B%28uI0P}|Tz
zG1dc5(JRMTncf<UWU5h3uBpM9<nm@bycakJ**ihlZMxs3TacSOr#`lUw6#CT%vxNK
z5rnAXl8$zUmH3gExX={#_`L!k!!VDEB=q*Sp^Wa~?#Z-HQdJ2G`w|khy`1+nr^$Y=
z*NZIh2G(d(Vox-JElk8O<~*atz5X)=Lxg49kt*SQr#tY4;&L?%`>X^w+1O;EV%%)x
zt9^KEY}T-~QZEqt%KX5Wyy?7AM|JoS2&qL=)6$B+3P1r+1*j^df?i#Q{k%(Sf`k#R
zpmnxgG<pdMii;mu7oY~M3w}HYsC!=`{$b~Oa3WB@GSewDpu3_dW*lmrjT?l-ut)a5
zwC?B7DMMurBxih22=>~Mm@Jq8i|Hf+Xe?v(-0qZf)O7~FAGy)Z*|jo>_5_LXxFa=@
z1LX-I-1$_{MpO3!@8}LpXb2(FY1hH1yP~nBg|8(c9>{MU>Gc?=7h@R4jak)>U4~Xj
zRHObngNV6`gA5#^u1($svGjKJ-EK9@BHKv{_PC=wRCe}?+gvpJHoQlQ1`~lZ`2v{&
z07d%DwN*-&jENXQZv^W4euBexnwFK7I~0`D9dCq?Q(JrBmi0Q&-CkyJTv%uxu_3Wg
zmP4Lb$m$jUv;d_tH$Kd_S8G5dh|0*YWyjy<=k<=MJ5jnl??oo&mL|jGwLKIY>+aGQ
zUY^3c$?axZqO!JJ%#l}U!dQ-ZPsvTa+LLf7%vY}WnrBh|`yB*3uYiD-QpAyT0A=N+
zg6ISZyu{MQ!Gd(CtnpN>o_P6&`-=gP;cMci2|BuZ6Qu|)Q1vI(@AFn}pL5=nSopQp
z0-Q6KYjC&yuNV3%bV{sM?po)BVKsq9G_zg8C=;fxBZ_neR0_5;$~Wq17Yp0$+k`<A
z8PB(jfSAkzN|S)*cJhZ<gk^UcDKX(X1srCIYDRPX97e#92eVnB+T3z9G%r$l*(=N3
zpdmf|xn#_P<vkh}9mYnwm7Nod9ZYSOUlc+S_-3e!cm#<Xw-^d^0EQRrIo|Hpt=yl>
zLKg>t`RQdjIRU(|;5h8Eb;@>jK66~kaYotC?`h~(IWEb!CLj}rO4cN6a4wwqlP6DH
zDhG!L6c9i*i90ou$E-^@Sy+4sdIRsPEgRmwJBcnRaeWan^;vpI&wA%zJn1dPcpJlT
zUsAuX?)k?XAxLQh>7dzg_Z*t7*ABaCWZVPylTO551vIen1+h0)LrW_S7j9uSwY1`G
z_kkS|v@pigneY;$%ec|SH0geRep?+#Za5b<afeabqrZn4{*PvZP#Q)$x1Xx)sj2A_
zlp*#>lZ&N5fnt+&$r8wPX_;rv>lHl{h=l@fxo_XT@mUb8M+BNr)Vy$XJG+*xQy{u1
zezYzvy${Ua=qRWUuAcBlc-3g*mr(4o^N09s@dvNf9!j69Ndr%}j>QRdA^2f!qQzyq
zz)MryAVgq(DpDZKthVMxO|GmB6%`nUVd=N#V)IZcv1X3T1A_+6oiaB;>5au}R9ryM
z+q(3!3T422>wAEVjyIdz0TAnjELm@w3N7Rh3}Gqke04P`(&cwvr9bFSSk36Ik%uQu
zyezU~Y=Vw$hE)+1;nA+WS$*J=MT+3#Cx7<&S5_riLbne$n<Kd(=k<{k%=@m=711@<
zT0f!fqcZ`y*deBV^CKR-ryK)T%B#C}!7~naAMt7;rF@8%07Vf`cLtGGX!P#;{79PL
zqUQ?SNMExEk;TST^-_#wZmJYa2DS5Qsqb@uh`<**?Fdhc;>`UTT95h$4CgtJhbyvh
z<U9LNM&>nCT0i=&s{XHeQn!iV()slH^EGJ$5Ql+6)l?7z-Yg3Qs_F{Y5=gkJuyt=l
zz91$fGz0$*gjL8$_1XojM?lzs3^atB3`}7#92aGDtByuBbmw7<h%Qp{=$l;`w{Ndp
z>}FRWAli=nG1&pqv!E_S{#+6vF~PlW^z>;OxWbif3DMCU<(^VG^^^NF4cd+dp`yhQ
zOQf~5<k3FMW>n>O5~bi*jTNZ;R_y%A1>ZaEC80NhrWce&L7>K6dh~FO*YfiU?znPj
z<_4yRp%R-s2niN|l3-(4pzL6g_B@U5ahlc}Lr=8p%1HFAWAyGgQVv)-JKz92Em#C@
zEzj47Z^w{G;cqxRac^SfsSOCyLd;^*5!(`4=;2xxdCUax>E69X+l6_2KQEqlUCs(?
zveD?;Xw}y`fm>)YdovH>0IeAz)!`~#6}C*>Q{RtgRmqqUJ>Ni+Z5s+`7h46#Kd|DY
z_8j2kc5e~19uWdPD?K<_QaTZd(ZIwTDEFn>c}yowA&f`e!J)9+dgkYQzP^)?sK^Ah
zOhq`)0j35aA&TEn;@^{(2VSA&m0NMD1}>90hV_DWlaH$Dlw2-~GBSQ>V85kJ1EEqK
zFe?EcRpaY&Y+yIWLz4=T^r&OM0aEcK0{C^(!3UNeT^$_+-;%!vhuwWA;Z51Vlh6=*
zp$8MyFi>W^_2j7+H&FS0Xty@HRPOoW9+;btq9c{Li%U9HqNAo=QhTP$_azLS$}7kE
z5<)|#9BC09bW!H`h#*{i=KEZ>-U3{9o6jpa$6dC5k!JVXxWih!*_B&#s$z%B6yjl6
zh0x~Ndr#*qKp?ZMq3|qA{l!pxoL9W=u-!l~tukw@fS`R_!pJNSXfeC#3SN3zt^kL9
zb)E6h$5kFXIYP*m!fKa>CKhej2n~ho2}dNPgoxIkF#5}PccFI;B&sC%dmtAGiXY)b
zS+7AVBlI6oDq_)KcXbrfR;L{~wX!p=?;B}?E`bq<GqXv@H9lcpP$O_XSa{9gczl?^
z5m5KMYbl0*Nj9V`RVlLLrzFMu(9p+M+?7_Hxn3B_%GN8eW3#GOQA?Y}aVQi!`zs^_
zomoyti_U?pjaUSqDfrVJW<x~*nzwIjOOG!08VT$<W!bPWC1t^z=w<;>ulmqy!QbP#
zrQ!>CzjoFvG(4z6DLa1;R0TuElo=PsdsD236Mkm$y0nhgq7B9J+wep-tLGl5OQVVD
zQ0*i&C7^R>Z8YEW?bP&K{<!GhwE!!tPI#(u!|{3(h>j6Zj9&z`2y_PHwTIrIsH8xE
zCwcQ>{sTU%0d;8u$ku>rC;B@{fan}{6dY)?f2}^;|30!o9qo389&qI=<V=Gc9y)_o
za8;kC1aBEa9UzPo?1^rD3hKpMDgFEo85{d#k<Gwm;1(^rbCZLEL$^xQpgA&K@Mlye
zYAG*XolHdu0uXk7<l0yzdT$!3C0kDe0){}muSZR7xs7`V{zc8gpf?OZ^r#i-x+Hh>
zDDcVCr)<Q;l3@>1Pa^mt7{mhEXF>cy3v?NMYy>4F)Np@kkALIqIan^(zc!R%+AhxE
z2m>jc>3FpMLvV4Z$i1j|Ep@cq`P?gbrkaxjD<l9&Jl?xIF+gj!xKwWs!E=M&GdNuo
zF#Y(zw<ZN%lVfCp%Tzmv#jEblFK*#yi1{^NK71O$u)4(8Gu~yOTPlZAQEWvN@S)-~
zjfWH}S?J!Ly2eqn{O*UzJ*PJc33IwdH%ji6D|+TVyGNWwBujrx_ry-&`Ng#Hp4Jqf
z3k^2SjHq{%*16lIRRu#j{FmFZz0QVPnA|!TRg8Q3j57igXWUo4b00N>rDUWr>D;GR
zUNxx}o9KE==hq;Tw_>3=|89D=ZaA*#s#6~-j(5?lmpUgTa(rx|XYTgA0)5uxGcJ+5
z<BenGx7Ui(W!R20^ET20zMqPWA6vfEfwxx(!KQBcjvOhSP>p)^!*BR1F?^X?OMj7(
z^(_w;@VRcD2f-c%T-DA4uIHutP~*~t%B$+)M0(0dz^I<=cbtnh1;s^%_k$jV)iBzz
z)}<!7?g!p@$Bx+J-7L8f23&p(^fRF}#%XN~B1!F~Z^VqD-3x=&AX9YPdEB!k$+|Cl
zu&J#rx7V5O#uI;#g7OLx&@J8EBC-jC#*)RVLkw%!f?2EwxX`O92GHix>q9P{2>N$d
zZrr#B0#9%fra|9N$OO?Pg|g)@&7y{%imi0Y%0os=Y!bkW9PI`Rnht4pXwmPrI0iQ}
z5%3M?eas<a2WWukWtlL#{gMJv_n!t{i<#-@LDPi&kK>>y1L|((Q?(?JP)~+*0~C5d
zau}BhfWC@uB(_`^`ud?>=dEajnxbMC^bg+&Is~y>@~iyl8HToa2`ss8wU=k|k=Q>1
z2tFHwGFF!!s2GXs5ivv_laexs4ybD%J3ljm9u=!mr(scm&^dl5ITcjXHK36fBK8lX
z*3NlZ&TC^|h7%lkV@m|p`VHJG%a33~gOZi%>T}poxB$fBSS;RkjvCb4R`w3Ib{2u=
zeoGkpj!Bx&eTR#bRzUge*|SiM6PkhpBu2|L7Zw&k7Df=@bN##qtBt9C+^kVA=9bP`
zRHFOziVPcS-%y-CbLL^jaD{6@zbEPG(><U;l+@9o?mP;vgL!iVMM!3zB`shXi?fkN
zH$(%TxAOO2m5>;p7XU)5%&fesCUuzP-6e4Dwn~-J1EDD#8a(%8Wa`YZf-!(7G6*^@
zV@dg+f)~=u@}4#(7%;&iaW9~%51DHzZA=ztVgkLulVyvjtZgt)plnLsFA{-bj@Ijb
zR5DEaFplK3XaAdPS`?BRxA7$rL2RHTJtX5kefj1<g{uz}-a|k!RX0t}1~Ff~I<%w`
z7?y868uB(|%_5_@HD`1}BC8jL!xurP=<S<@#F`oeRI3Tc@j$9(0a^&tZK`yVM@Bws
z9C(2c++D?{i$yl$-)yB*A(e00@0E^2M$FCMux1)nV`v1dUbznj(IPuz_>J7M?YmL}
zVCBs7R39wjstUlK!xFm>ZpnR6Z-40{{UNqou3dE6T~hh+V@6Wy8~O%i4jQ(${!qO@
zN9G5~eMmE9EicC%tRb~CzwX(_1=|l7uQ*`#!+J~YE1=}WB>w@-Ty~|qJ&0F71@$L(
zM~2hTP+^8%^%TvQ*U^a{bD0j;<&|(*zlL73sSrMZ=0Ode!LxZ=!&Z1Sd}jV~%YYi;
z3PXmfkqKIPn0v7Ty{qG%`uglDQP&0y+5ofhW9+m3Z2II$3Qv_wnlf7f>q1A8k8bfY
zqv5n&jrX(-#r|%!gu2rXkHS3<52`r#Rl>U3+N&VA66&y4S<*ZyRQiMfI{15lPI%Nu
z7x?G0)~ef&s*eM^T<2Bp&9`k>^rDJdo)%E@VzLBmFm+31ZfM1>j-*C_dr=b;XJ9%M
zx}bod(4?8ob9a;mD7<xeB9~Hj^1-<W)x;MNC}lvoOSz3%WO#U~F}9gk0%S9S!-9W6
z+KrUfDWXj%xf&;B>Fq5U-O2{~kau3c_WKYUn+#+Tk$~4(Qb#r}jw2t2V^-ZgvB!c%
zy2Z|GtT_25#e^@0mVF+*PYyq%T_i_zd{B-R_<fYgpOZ9d!~(Lc`lAGqS9K6W$t8qg
zsRxjXA0!zQw(y07Iqf<5v$AA1m>Tj%ALGZ-Tr}w=C%$S~WplwI!qZ#HPD*p$Ug1XL
z<Iu8KW!vS}7Y+;r&236`$nyjjh6&>P{R_%(_43s0@_Rm~oxYK(T0m*N^O3iP3oN+i
zeDT)E+QR}3g-MVU)ezjhwltQI+PklcwtUuCJ1|ZDD(Xq^Dc%xWjFI-V2sYd}#}U6K
zwoG{R&0m)nVvqa6R1pJN;R+PSmf{S(>5(F>Zf-ZPlO;X{{_wk?LUw5QkrmDZT)x$i
z;)*7})xfn7zmucKnT;th%;rrqjWIV|zkoQ8BW_!R+l4#3+C-Y)1%B2mNhY@?A|(6;
zQe6GirXMHsmBFDs*j`8mWBqF?fVU4|#nt!cMXu*Z9_+5!EXUd$Aj{_C-7R}%!H6&B
zdstf=CKonBqiZrAL2!wJiAk!V%cJ*{m0#sG*wl8Ss)1O6kRMU9NM2R0&r`WK6|lPL
z$LM7i)d2eBec3v0tEKZ6MHq-+FE&92BLf~BEYQ$#c{*#HT|Kop1)?q5J`4hRP*7gJ
z-U^@*l<k2{1n(dV+RPOJ$k}pRzCKMt0Kn@^XQXz2s?v9b5<3r%iU!Fyz6b6^IDhER
z%M676Rs=)JI+Nv=;Kay6i@;ImxKh*~w_OZQgPnovY&ZiNjwcvM8VQUjtkrn&y$J%)
z`7LnU{`F{&zUrWvNG^yb6^6C68M>v4U}69RR7ntTRWAX5G;d3ni?VXND<DS5?o<B)
z6lPSq@AiS3P8M)a$W<S02C%8ce}boR6MhO1<~TZCVwAIBa5)zwjzg>j^l~Wr43NiY
z2FI#;nLBrY&fWj4Zy6c=P=6HSbJfrlHnw_}QV`MUE;Q>55HAsfBLcnHn>DmsnOjfj
zt!>~K&QuIY-!b!kf*`5z(^D!+04+ASltJ947Dc!Y<{s5cQa;~Os(?dCmj|n}?5Y4#
z4tc=*J_U>N%BEr7FqD-gx{gR3WX8MXElWW={7t>BX=u!BIJYWi@o<V4Jl>_dkx@}8
z5WjlLLKhwj7?zx{F(-X}xz-r8`)glc7v+Kn%5VM6Qo#fO(|ITEnD}C1voN2~-@6(T
z)Qh6Esn8iML$8Z)i-_pX#|cUS+|mu7Fkcy3>&emkbdJJZJGy&@A8%rP(v&)smFUC?
zs6@U~jXkD6b@I9wl@S5akMG|de~{Yu<Quc+9a2$Kr~dqT1x7*+zNueLA_uOgbl=cx
zCS_;<R6?PXJRNiaT?YNGy?*Vejmrvs6uk{HgCD_xRuhgWb67CUISyu%9R8Z`L|_Hn
zD5#E(X`A~ToSa+HN4!i)vDOuK!TnFdVLE|}>TPha*5k*#7tYi5KoUk{sqa{QddH8P
z(R=_4V#B)Zh~<78Z?K3rmdi^By?uz;v)p&%S2wYk5-nF(cZY73l1xA_L-w=C=yG$c
zN8M<Gong~dVZ}8x()2&Upt-lKJ*&}{m(Q^N`Y5>HQ>3^h+LWvV{!@p~!Int{CuaWS
zE;nq1Nd4!plX6hFQoe@|^<?BqH1FM$SQ(8?mkEgPoBSbDbg&AN+kGE6x+{zIAUT1n
z=B1#>y4g;b0Z<|iGwNI&y=AFC|J4rYuTVkd`uFeOUn2BQmW?wO8VjvpLu~Jgr)Jg@
zAoyf(0i0^^_4iH&$c|04G-V@JHyA=Ji_IAlen5q305P%%kKi#-^ubGiI7w+PRiuB>
zhdGsztfyn%`OB~1+97ri8>)$(n*^!l$l}F-iY7NK*)x0<H|xZn%iFa}WCFL)Gtpgf
z5_;#&>>w|wTL_EPqBVw}M)-M35(X&0Iwi0RhZvxn6xE-m4Hr8Yn|LU;Q9BL(To>@q
zYh;;lQ3gPvH@a6l3yyL3@B7e(iC#!gfNk_1vW|Y`7<50?(hK5MLD46!z_ZsQf?Hxg
zNN1r=GS8;YI#2-Imfop4WdB#Y>AwsS{HMstwet+$_~Jy{;SiNx-7IJqpYOB*LvaDO
z^)FgiqIVB|Fk;k~_FJFgG89?Bgle`rGJaU+oRL>;`nTnQfN*XFHhhAd0l>xgG;F$G
zo>1feDF6j_XaKH31gokj1_|7_u(<ket#QG=#F>W}Vf(altAas3yQw=6@nS_L1uSCE
z<e9d|1IC&5>(?*cmGZ_X5cG#u?ax^TQQH@j(Fv)~?*JKW|4@;H#rlNQsz||LHdx9o
z({t5}z~BD(inf-PMPuk?^mC7;f*`Mh1$J;+I4@nQF>oGpo$m!h12{Q@BOt3;c8s#Y
zd~8A^WsX_nN3=!5R9D1CFCK#D_x6>+?}+d>*o;G+#Y1MH#aAN>(mu*Dd<r;M5VU9?
z<#hx8DLPfalmEsS@FU$7p+WQW2qA^1F$hUx^WLVYD;yF?o8)KZ2gRthfa;&Eqtkbt
z>#2`ne}0iFac>i*;IkQv18mThf{rd5&V{=mTOc%90ZQuNClgn&VYAvSiWa{#=XQeo
zaq6$nab3;}J(*$F)yE+WZ^}Ft#*yzZdkuaSY>S)q0Q@7dQe_|o#lgi@(RT>K@F@UH
zG+1s**kHBpX<##c{VGoPP?k7cHV!GfZfqg=?u)cvu<r~qbbC5v-0fKa98wDa8*RlL
zwa515usGIT=wJ90z_U?~gzE0evgu%VPd2SAaw#dPvYAj$xVtU3>-izTA@^Q)Ev(m~
z_gClqViTuLhMhRn41z$`u;~{;8$cC0<DAFxe*Vm$*d}Kxn~mTzaOk{Tq#6_T?p>mu
zO<Z0|ikBA^6{aVhug(SGoo0RD&~6_Aoy{S%-9?j2eq1)gl3Pyw2F{is_$;2Dr(2{5
zt=591Cq8}(daW8#=9S~gUJo+4y_TER(ifh3I(K{u*?E9Aexd1CIYaDGXq3v<Ks}zX
zF)3Qg>M?8Bci18sR`$xxsQr;&VdVg;Utl+Oq&=yPNreS(Vl_0(sDASKxe<iLY^;r_
z5hd^}4~owl75+Mr_huD>%|dqo@C^==K|r#i%5fJY{SpE6%hNgp&v$#Xnb(z72~rU2
z`?5xmod$;1+@Ygz-Eya#Bp%2G0n_iE;U?%2h#E?6Ld+RoEbt~|P2U($TeqA1-f3%T
zvDTY=m6Jh&W7j?auS^kKOxgg1z%NjAxA9i}_|=&Vi7Jnf1L#LLTj)ytGE8L#D;)yW
zohVa);e1Oh0Bcs_>0c1u&HK;Yxs+FZ*VVOD?ik?k+`KB?)Bv8cjIomaA<Mi2Wz78Z
zQYe;AY*L(VE`>GiaE#`!zJi8!{+*0+=%}|WQtM7LumYILzaKE^9R2<1{#qxfb{_it
z$Oo86Q=m*aWC0G3gM%eyh)1dnht`2eWjCXIvx(EPXc?4&o)l0wyhcJA6SBmPV|l)2
z$%~D9p`jijIm^AAo$t8Tqo9%#MgwrEmq|ysfVZ`}GcfRUo<iB8dkch{?B;qDVej8h
zI%da~yz&U`DR;I3$0aPudbG^3Y-eccJXQZ)s4B(zJLd3~uPX#=3gDjXl&RVbKR%*I
zBnq?O4t)*JhdK%hcK_a$ZDX^JwzYLs?LFKjDIC}H)hcc5n?9I}V2?;d7lAYp7Zt?{
zJX1F`%xwtDNv2YYTmaU(EW2aD@sB7d5-?1MECuTG`n!fp;YvKEw_%!xygx?Y%!AM#
zEt2!;yG!zw%d=btc6E;8^Sp5A9#mfD5EZ=*qRx3-lu9`}mi2+0V&@LvTMqQAK@1s?
zD%Yk4eqLT}_uV<_ML56H5)%_Ccy3wr2s1bud6jl0ulmwj_x*f7M%-Se&jZa$2?Xze
zKr!bH1@C4S5(z>JfTz+XbjP)ok*B>43hD;)A)c;%pRPJHE^0tYa7?IyMVy{29pp3f
zRAL3p`g7w9iN8ajjyPU*uHKFIw&}~(J5NbDcQ#}kiOmr|_$3CqQ{@MferuvrH?Lh&
z2T9Y)_T!QVTsS**o^iZxzIs1~DAmBeb(v^ke(}4}!JqhqZttLz8PI$H-HHqWlX%-c
zgRE#o%{DeQb%DE<)YHS4V^nPj$!Ying1*`o7BRqchSQwvRIlL>d9b=EAKcI1a_GYX
z3HH`Siwbg$)zDQVo8G;=k1>Zn(&RQ7Ju2hcixrw(1$x{JOI790smuhy36^SlD_!g1
zxL*UjV(s7ZFn!DM;vT7d7*6BI<x+RG97)j1P9@LtG%2u_U8P2fktSshee-MvTRA%A
zA#~Ng7rXm9S%W*9MiixKM=FYk9E0_J7k+3f&U-0X5oE+colIl1XZW4GEvMBHoiKJa
zfgXscx%Kw~r=}_R9DZE`+)BZRnEWodW1#%mEV}xvHC{|FP9$zm<_y4BG-3z8l%(`|
zA~8VvW8RVY?QMvfx`)S0A~L!ZP?8-qF2y4tGMlJ@L?D&ngPH5&fPSfdB?q1mtB|tS
zBvfEKPLh)He}Dpc96GeHkWOVWR^h5!=D>kRDjCXWKX*FBYheuuoX6vE3c$Iul(Tg-
zb!!Ad1Yh@U7;T(84QmEB1%oS2si~v6kd0gf(df+w7|<4RK#sxQo|+OtN&5-yA{qMW
zwT+%dt*%sS+)Y5@8ZQ2RwQ7S|F?5}^F-%AQ>XhcKSg(LGm|R?X6DV)*gR6D9V85r^
zu(r1LE3!Qo%%gmyp@=kW)!uZqP!Z?ge%JY+erTvzjK^_`X4s8F)qGdHnEPo*AX5;Y
z6bGN%jn#WA;>_A>D#P`QH@{l;^Q5K(swapm&<L)I2GP3*gG+7R^dZ0j#_LA~bWs>m
z?8d#lz$tzg5Qik5>(}qXh_mbO_|l3tQ1j?+KdxNXmM*-De&PY26*sEA<+xa9xTL}s
z#-<!K;Wz}@FVP*>#&cLVwl-@cbzTJo;IBt}if0y{ag7%B8ya89(<@P>(!Ztvt02?8
zq6f#fM#2*{^PceY!Iy@qMm?_Um^P$lNB{&Tza0Xt7-%~1gM1Wl{eUe@b5jloS^Gq5
z^D!C9)>p<VHS|g_C~iHk&Rhc>ezqQz0tBfrHyY0vKOX!_b}n*5UzM(e+}Nv=8hmcs
z4}KuR-%zkG0q4IKbm=r49PWro=jaygWMEfHjEbH#KBgDBKVj$$2)}_RI_MOsSj?-d
zOi4=|p6MusY*=%UNJ|uRcLFy``<63<+NZPNDv<DgoXhukG|7~jj+F)x-Poq)kfU*t
zAN=NBbu>b@pC`+q0|!zx=}S;&Q(o^0{gR6?Ywii+$J^rvJHx%J0wmyF22yLI)DpaW
zXK_}mEpD3h(DQ~k*5fr#`SM;}9yoJ~O=g}Ob?p2+I7f(d7W$VQCu+Q;4f=D%K12;P
z8xMk@+rkg>Zd^t4*i)ziP)YE54XZ@3#eHXR{^~9Fbgu*R9HXPdtat=BrzNbFp(HW)
z=N}?V<Wx;ZDL7vF`d(}zCR^?Y+KdljVaYzky9<#<!Q^ktw!5-KBd}n?KEz`p<d};w
z$HeCKfmx>o38By_Q_9D85svcA9kCz1sY-&<qww?FO`PrSBcg^?M~sRpmBa5UZUFQL
zfkht#6=FL;JJV=Lk?n=qPjCA9U^dtlfIB#hmcU&TEPMlYoK$cmg_yBI&ySpH-$4Ik
zn|LY*F4CZC2t{Zi-Ju%li|*xhB?X0zgE=NIj~XZ>Qn0}1dpE-JwC)6bwf4EyX`a22
zcuE}<>o%vef`)c%VRg$*yOQq9l|?_2*2o_ex@26J8owOJ<+cx!w1c~P?k;1~t{B0r
zu>r${e2G|+xUw7FDGhC(uapM)5RfB6y^ieS<P07>_}cGk<YD)IaxAcWp(o>RGNg6|
zLR{&|{6OO(9oXU?1W;i|udM)IS2sMvgREnm!<`!0hQp>UkA}lzvo@yN`={yx_^n4u
z>#Ipi+PeAs>8jhyAJ?4%M4Orc_3?(uTL#yePMQ)=s8XVCf)U<vxrTNqRKO*Jz4p!?
z1K;OmZ#<V@Bc%n<21DwIGyY&m8Y+0JkG?<zadX>PBTcyvayy<w)pCy?t4X_puXAv;
z#aq!<?y|8IbM4Vf*&v$PT-Zs=+6}4VnD~E`m&TL;^O!PZuW`Xc{{j?LERL3!K!r_?
zWnQH$SijQJ(gS!t^hN`=3oJ#2IO9Ys;N`C-UGWs4J1w?8M8XJ=ZePIZ`z?Xl$qlnV
z&j&?ux;e1N#vw_)b^6c?2(Ol!c|EHq4<I4FGmyT>i&O#JUB@(tuLl-6RoP}!Rz>a>
z0L|TiJ!Q7Eoc^Jt>qkb9g0+<eM|xYs3e;Kw5IJAo45I2#jx>5QY#*Sm4s{+*&TgRQ
zU#gHG?Ue=kt=^oHF^dOI;N`h($h5Dy?hG1xtd0ZY)iyYiE<Hvb`F7b*a+&G0x?O!e
zs^Q$WrrLyaw#O$zFIKE&RYjdFE|>J+>tcHv?AP0QuDoCdK!Ys_gW2u(;926Pd~^9@
zHee;r%nIe6c+-M-d?$ZLF~Cd6|3UipZQ5tUy(OBSMn{bhxTOM*<CMMI!-t8GUrz#N
zK#SFpVMv^{{{kMfUKuKbPf$$<37Vp@KJaBszP^~T6@q`>b!Wwf1(R(b!XLM%0!YNt
zf@tTDNlyTG+Z(x2sBP*A;N@{($KEPlg@AOiQ*Nz)b+mjjmA=GkFdMg#Ksx@DR`#Ae
zu)SCAthGC<B|v><!!SiL{CfjKxf&$4ZP^z?Q-1gb6gn(CK3=hDch`3azGxSLPvB!w
zqy_~-P=Qo!Hrs@xKF1dE;rtR<^DfANx^msL=qXJfA;Nt#xcR3Y8yi_H^>N`1r0SEb
z(H8Bo?;?#>g(c^IkdOCr=84X$Vw{&>dbG#WK^oa;yN)UWzQb<ne)XZ?19e+<5-Rbe
z`S^mR<K4)mVVj#!qL^%00;f^tWhKg`{D#%vcu;E$FKHtd?0hPCk-jF7d%3`EP&U9a
z7|WWYx9bDsW!53)^B-@1YreiZo6kEIT1g)OXT4`va+QrydkIuU-uabXQ16!Q4s!3h
z`BMbaEx6zpXvA;@jD?<uHohjHPy;eYQ_gmFBL9MnNA}$8??NSJo((TbT+Q)l4}l=H
zG|k^AcJ^+xkAJ0Jz*bMw9?b|mf5#^L)lVMTCuyuL3m6I-QLcR$e1h8YN;qqNx7~KS
zbg%t2WylOtliu#@wqF9Bh%!b3@s1T&YpR-l{jMcC^0|B$1Uo&|)f+Nb)Wpyq`tLYv
z;z;6jE8T*UtVh1ueHpaaZ7YJhIJA7k{a)BpqN`M{N(Y4&y;r460qX)FKD-?bZfW!>
zQhto;Ce)Z>kvprmsxsZMjC-64&Zp=dq&Q3>zX%pyx^#-n_mWcH%c-w#-RQU98cJ1T
zKDgV3+iBLEc$?v!$aR8S=`**xjuXd;vR$%gF*CbzHr*c2Lj{slVhi);r@#4pR1=@K
zR~4TRQ&VdbPS|bWS$r~9F@NzW#NT3tDhP5Jk!)L(R8%bBO~`L;Y+S$fE;0Yg`BROo
z_t{l@#D)7{_p)#`&ps~%c}nYGCFx@^7U%-|_v_P~QgY|Rk*^zjz#7Nh#2ePw0lnV<
zC!7QYtJ{yKE@T^&Q$jIPQEop<lXC<LC2q%PW!2Tb31j_+Jq<W82_^9py~=}|jh^eE
z%<-kq5$d!#xU%kFT^=phmIrhy^|QW~mM?pJMx}m^R)8NPCib($jp)<ZgZ?Gb=OYn3
z;lYlsdy{^a2Bv_-gxWPi($MDJalR%!$ea*>$Nk-{K8#*#X{_?;R0H$|O;$oTZM1%a
zkl7@ZPA%`0)6iG;%tS%=<rU8}+!_~;^7e0v2Lo0eDhg-f`3U33k6R*4kK#AVB9;jT
z8K<2(d+>HYeVT(|z=uy2?L4~En0mtQ?^=L6JFoB%Z!$VB5_u3HkXUco;o^<rz}>od
zvm#xOok8STs@-&%eUls1&`S!8VP+uiLGqwNh^9LoOBx@aV`0E6^i>RUPOl4BhLLw5
z>z=a&dCIAl=rCETE6kT716~mS`0iHI-!CWM+}K#(7N^%5VQ|-u1n3g^sXLlzptBXw
z`Vb&Vv)Vj{Ow4H-z6bKn&CLx|MjrZ0#k>Y({*ani>^j_DFzxh$D20fFV~+PP%)yeD
z8Q&1mVf-%#5jt@XdHJoK9Vuuu9&`krbrz24pJzAx`uxu(PtMMAr^Jak;uDjvW;r6k
zPhmT0y|A?8!(&i3*t(nd<;%I|h)V4xJBz=JJc~}Tt1;Z%kH4K%^XlZ|hqVDz?bCVH
zs{OiYikiMEv3(@wUS3|11V7s);=Ibk75U+O?CBjXkn=qc9<J=lPqk2+Ipu{wK3ain
z>3dxl3QV$kFFdGpI{|3<>+Kf=e%}WN>#T=lG<G<GhZy|*V_3EX3oWXnFLV0|e)0FW
z%8}$It!Eche7j9WVVyCvCuU%IcRwr7e|~@UIk)UVKlYxx4TW8-7Te;Ye%@^okLPu7
zh~xc#Ap_ZE?Cjnfnu3N!#Ais^T5Y%<0947sbxT-y63_#beI?lB2^<i@ujb_?4${n*
zQ%(@d=bhy>;)%;hFD6z@@YEVHjZ^jO&62R(6nPUARIrC<#B34Gru@~Ys{y+mwqNBi
zT4r<Ed~3eCD<wfHxl^79FOX3px6cvM_d)CH@drpqQ_5Id=Niz3`5w8;f?52>t94vM
zO)Ti=&$D~Lvv@hIysy5o@#OBvO$Mk0_@=~L`9xqG$~P}h)9fw}`n-Hu*6_Z1Z%T=B
zMF|vmcnr=p)RQrak5~afMdh%>792ZTZA5b>4~jd#Zyv58y#bpQ*=2{y&T|iOit?n-
zD?o+XuR_%BqiZCO0V_oZjoW4;JF7Vq_L#v|Gohy@p2g)t8dqq=eJ;{caaxU!k29{W
zu7;um31WfKwmG*ty^jd*$+`qHijtAhX46sQ`e}Kyt7ezaz88CpkYu*tqoy|h{@lzg
z{qGIKaD22y#AR6V7o@j85Wda|3Jas~B@L+6vpFV)-0rp5JR2iBtrxJPYwPI0n9;@x
zB6$brYF<2E&uWYN!Me0Eu%QtL3&x_hcDZWBt$V=%w=XPPjgJPic2?v9nj~Co^JZKe
zR%ooH4%=(?w~)R2gB0i5{xUZ-G(=m-x$k0l6liblFod~YICTO%0;Uw05W{mdRueTz
zp(5kOtzQlf7t%>X3&B$uXx&|HV6287luVTpySWw)RyM;MhhDa}?u}OLfHf4!n82Z~
zf5Ydef%B+kPg`w3Y>uw$w;$3vmZi-R+}}RQV0*B`UpHtK;$a`1YCdsdKlEWz8rY2G
zvC1DA+)ZFAu9TZmsEnoyS-4+fw#Zc;?SNKtNyrzo=4Hm}RJ@nD(<Ah9MEPjv+S}xQ
z9S-qd_FVm&O0y<3^k1&l9x*YX$Jfp{=eJ~^5>}nnaZ)jJNBRC)>;xEUHE}%uo16HO
z08-UKo&LOZ>b;ZZj~<CF>e~S3L>Z1;=#qIf*xjuWI^Pm~GnDu~qsO{bfe9ebao;!V
z0wP%p^aN$%pp@qYX@q|Z&5b92=@y-17rg~RU5*c4U(TWICT0K{h>i*_?!E_@nOrN!
z@HGHzQ3mOsKdWQgU5?Xw-XYul|Jy6WL|#?3z9qT<Ap9$HEv}~}j<+cw3CBvY7!5iF
z>qC|#>yRdh@~DP-jnG0s4|EERVEM~9ITg#eR%6_9J}<AX27}&CbjvOG9V-R(+tUh0
zP&-3Xs_)^n2hr`9uc|>lT)mWu?Yh8#98O1IPw~BJ_W9|H*Cgee+uIuk3rv?P8H;n1
z4a#ftm*eB(LrsO#R45Xfhs#YFb3uC{1qX*bV1PoeC(6HofPNX{Zee~#k_c-ltb78=
z*IP|XBiMFSn^C_;ooBh|ZrLcV-n~n|v9aMF5@NF{UgHv&E=I`8%KYUOMV7Zejneby
zHx735PKKVR>>~mDYWd-r-)l5#i}-~YB>HO((3Y3N8qd%SQF|V2%RP7?1V_kaDr6vV
zeJIE7T!X*mdzNp%l!f5&)vRUzIqoqC=&hw-E(^{P61|;0K}2-2`D!?-4dK#DM(6*{
zb62GzM+6>J8mfkJT!)HCC?lZf?%lhGgLSyVl{<30zJ7A8KQV!Ufg=649L(}$X46yj
z<*L2-smd2m)oMlpFElK4+5TL9AHl<IYDDRgULzs{ARg(YGrYdwGs)e18Y_VL{`~fL
z9q5pFP$)4tr~|V~`84mEHK$5rsJ9~;T(wD&AyfaEi>Ui1l#vOc&*{b7dbV9L7`*R?
z3k#1C_g~)*K0z`De6N<RL~PmF*&hgB^3ANS;<2-D6mFJ`JLy)m=jS6Iet*Sro0^G<
ze&v%2pJT$5|H=#hjM9K$!?(bp@Q5fXBV#`_`dc9H#VuJ%&5{7zU#VZAY@S~%VPP&4
z`^GS}W)QALCaJtM!@;wQ?wiWwITcVcxxz&>vgP=`*S&g}c4fEd+=5qZa<Arz%cpHS
zzu=v@8$fyP9CN9YwWt(6qR@uduzjI3nYe0i%08fEdU5e8*Wuw|Z)qDy5OH5U94dP9
zXmAfyN5QRl2%Rklv(SluJM(_b>E(XNMl(GFJLz<n9b(F-$(NZ6488U*D-1!N*up?A
zC%1N?+w_|41R@DZBWO+c`0?YI<pMaSADr`Ff6*AWQ8Ux{^XJc+x&SJ>?O%5RRO?3}
zvQ?6ju<_uc{Nr`EIjPqo-?W`!c~FDjS~E#~qV3jNEhH5EV4E<pveqsi&w@zl6dVGQ
zR#w^X#wy*Tp3r7yW>T(ox5jd;@9yT^9EaF71g=DKh^qpffR3Ed3UV<%r3Y>8?UAD7
z*Pi@5)9AJavJ!QN^yh#A8n|fGubl5NTa?J$`(o0(QA?rrmpPO;)<S^F>dNRcf!BEb
z5KvQ^l*)m!V6Y0WO2*tYe%^dG#OHx=ZMC<r4_gEGg!flZCWRXsMO`3lH$@1trHzTF
zubVxTlEQ<0Hr>=MU9r_hp_+ur8$Q^g(`oo(F{jSB{_0?2dRha02(JKzSMb(`(jZrc
zWw0k~!xM9@5{g5#!;#0({5$O;#Qe!^ilX>Vj~VRiOI*%t3`9t*<P%fVA%}7d=0zxp
zQ2pWKH3t#;(6Bsa;r**l%Na3ep=eGOvKLfk&TB6~xi7jh!?A(h*lu&iE+u8;OxN)d
zeh|--SC1Ea{J6&0si^F(C8V2jJ}OnAwX-$ys+y%@FVqcUtw~JHHBds`RD)FTBVm62
zI@B|`tWKp72ZtbcQzT^h_NA7VmrobzdJeC!v(0HUArj#zJlLW4?oL<xYoD1#j-(mf
zTzSPZ=0Qes@{O+}6|SSGV+EB;j-x1N`>oFbYdVh}N%`oHWH<L_MOu1RKO5fp{v|6b
zR&%^{;^D@pl-StV&mMsHf)#mp?Tl{bcJ0mfBLZl{|LP@1&B4(KU;WmyKUDp$UGw5I
z{2IUxvKOaMo!Xq7pSS6d+aH!GH(M01J3CBp_O8;kXG0Dtsl6j-1jy!|UJVkY`OCX;
z0@=G#cmI+C?6Z2Q^|vaudDgt~G|92)l%t|H$XIb6IGe~Arc_pY^!iR*sL<t-mZW7s
zGFuD=nw}%_{(gI5hD=;sJaqOX1=|Q_94~oOS=jU7gN(`O*GGfszS(B&zwi*?Q8Tz(
zk!j_g_b~>nP3=K$c6Kef#8JnL<0q}G%im7D@jo2|G-MC@EQ)@%wMmUvd0HCq3hbyc
zAub_67H><12C=?BZ&VX~GktQ3`FQfo`SY(56E8uj5fQYkd240K0K3f2nuIqNnB?Ib
zinFG>I{wF*HQQyzcUw{t*y<~eHkDis7SbmdI6OZ)4}LKLa@>q}PldEDAnsoc*F3a^
zGqus4Xl@4$C*yY)?^~-EIU3W|ubg3E;7M5-$kzzXLt?!`3jw{WHbf5s-wMoY!C1p(
zK|!j<#>U&D07su48ymZF<;s~&aL=^AVBTK9K6|(GXh{V8V`<nJ6_u6fwGc)L)xQuI
zDYYmP5(^8@ySnc0fy&`^o3VleaG{A$4g*Q}tyi<KmTvXzc7<N@e(VM3m$mW<>`g0L
z-zv-j?W9g0=J;?r(#YxY{^o^)`67_p@Pkyz$>YP_$ZX4&p09v@U#V?ioQvW_Y22w@
z7a6AbFSkxdhZ+q2?S|kuv^k61*qa38*u(CXU^))jel>U>B0K5+RIRLDV#1M1_ggd1
zPcSpfJ|6jcn0Q~27gt6=+u4bw?5e1!cx7T^!+1wFxMIcAqF3=WRPYo%@B;T(6V~Z0
zv(VS$XN3i21d24|qAhL3p6)+eluND{Nxk4x|D>Obusy^>goU01ZsaR;VRw^P&*3A=
zN=sQ-Q+z&;<r{Y~@;@8eJNe>!_P!NAntM+B%8aeOeM62OitX6&!ugqD4_d(g9Et2t
zpE`9;t?%Q<Mf9kHGZg_BU@gY&@kZCJKRT@E0*!r{Gr9Ec>Z6Odim$4q-kY3jr4@3y
zMg%T1Uun?JN-7=#(x2Hw?VuUN^eZ7Ul6+Z8W0xa%074i4UprB!PRrlv+j0&gI75Ii
z<h_7wXfnCsB5X<PP%hq9<`y|QkHS+g$kQpw<}Ap#S5G8)huaY9w^_|WJ~Qm2(5+kF
z1_w)}N|t744VDgdb0{qwQ)Nta4iFY@ZX)+IG|oaUUM&_%6Ic-wAoTTW7LW)9w%g`!
zMVOdTtpK^P9*64lGypX9|JZxWfGW4BU338oh$tXZg0z6Bq)4YoC?X);2-4k3OQW=a
zNQZ)Shoq#4h)9EUcjqGRSlhkN*?YUsxxenO`>h|wg0<fFopX*c=NRJ|&tsWg4c#*E
zZEcga6)8X$_GEt@+kCi8iKD8Ty;3s-Ivjv+8YQ(}54`F4L_3eFcv#Bz{~e+zKFn2~
zYQz(60N|JpfI{x0Z<Sh6y@DhmC?Odt3;?o|CUn9j`g2>M>+)8XQnv5hN!0yokec*|
zub%IQJixh1O_m%`aL18W^Yfayavze6SLnfBb2RpDjXqy`NV5Woqh^=2nhYIfrppo3
zZjdXKdic;H%+2@}AD`RdZ9od9>D-BbQv?umYbU3ER-IZ`G6ayfAWGG9J<6IPj5dyG
z5xrh+H8x>AcF#@}@$LXJ0K6OyKS9n;k7Er^l?Apl%mRCw9R|Iy-dp>1@^c-?L9(;~
zek4=N?RJQ3K6;cER`zTw^o@`kCdNmQI4f>Kc#8LAhEN0&p(7+DLYmqlC9RJSx#G-O
zZ<j>U%K^@^up>{qRQ<ve{ZkS1Wh&>*wr5afqL?PV+(XR5VhJ*nXOo$eHSglha$XcL
zb_V4|ob$Qo5t#~6gXwuPZoANt9!E(PEOCQO&O}!0(}ZQe7lsRn=XxK`goRy{V-^H$
z0(1nakgJbD0@Mnme?az^QM&!xw-Qqw=*Xdm!23i>y7H6kCC_}TI6uKby9oDwk5e}i
z2>sZee!0nXc~iaL2}TUd>joS>L0LO2hS5C<1Ebjy@_pxW`#$PkX%Q70fu%g@JoxdE
zP1CLjgr~FjBw6n%_PAmq>55V&EYi^sp>u&=8zp=ux;5?1IO#EC?ueQ#-<`3&OQmAi
zG6P?}Wbb{mP3TzazxU~mg!t|X6zZbWp>(97dWWcjiIuf;QQ92$8a@5(wz*s!9Hp&f
zrE<%W@yW>-0NX`~7#n9AYzBcQ;{7isvJPV69gTqW=}w+$o3Rx*oHvKmQ`x7zUgyc1
zb{rfWY~};jpsjovV5H2@{Z1FF+o3oJI|SQ{7cbTUo>ZiV|F@G8%;HNBvr>%bbGTGn
zTPt=5<umK?da6Sdz0-u7ipo;UHPFRWjd$uy6qNg**s#9<IZVv0S-}h)_vvs+9|y?M
zhbJboT+hytp}3pdy%6^1jcPt0CrhyqpuxQFy(Gr@glqKm4a*rsJi9(-e0&pDBD69M
z=pw(9IzX25BJA@S8H|t`_lEX40K`80TxF%x@n$JoCGvZk<Qq|!gckss_IE!%lx~T$
z94_misq=O?3o&-x>~&_-TKe3)dY6|ZtP=hgY2E;?@!s%2r5z(NtG4;>aYY4Bq$q-p
z){hfG-P`4!CbO$AF1{OrN?gfb6?Q+9CNUBW2b#t1_cF0wP;e}0+og0CdBp%BP{>qk
z=<Ovw?W$e7>fNE?^&KLt9Y9P>wgfLBvd}TFK&na7#^#fS)n3a5_5gjrzFCJibUZXs
zdWPd`A@Mry5MnaQj*}`9Di3@@1{s1EF2PqE7#&x#-ts;fC<vDri@F`jnUJYiF4L1#
zrG%WEn7A$tt&pY#or{Z$tKVC*iWDf!HMF%uUcD+AX6e+FYisn^w>jD;z$JIYg8YDI
zormZ2lWcZYR;!z;>mK{#-lvRb+-|U{oI5b!sO&|4P<&3>d$$p@(cZ?!;q$Lk3qd&D
z%U7>@#&X~&SbQi3g^#YT2iLfxCnqO;N}%6QnNJ?WHllr9OvQw4GxFd^y>q2$a`2~O
zBH{O+3+PIVr1yktG%;Dd-EbVsS(0@!TUX8^wylfI1)Y3xA=3nW8H2fik@oT5!~X$C
zNMMM#(FTujQKkRw(mlu|H9#q4$vWxT&SEDUAYt6rugA*xLGU>R*eP^5uBjrLsQbQv
z`G~!lUD<PvfL91~0JgzVe`-(Q-?Mp%fhaSbF_9NyWzFZye@6~cHxqDReDq%dGXc=7
z{?|8M^Zoh4kiszKU>XP1QXm?};S^Bnn^XTSqXhpn=m%-fpmz__d`mzTM;|0_m7~&>
zvkQT7KqiR=QxBEm!3VCwU~)M1&Q`KNSUXUGylR!w!QR?fC>&ID>dZ+6E+SCYb<=8~
z;FAF_39ELK&pAS$PPi-5D&7#NRq!}0-p0IeCG(LPNG}4kG5oDM*G16XYxQ-2!2xi5
z&ZpfJ_C;fe)FXBQ9<1mJNorEA#fvm<?a@g-j=H3Xb#N06++#V7AWQG-P*hZutnh(i
z7irFdP3?WkrGskh*SC=VUIXA$vYYB9*qwsh`F*b7w6nPObxO0?wYtQHVa5%rio5R+
z5^+(1-4oA*hK6$U&gRv=@>Y?Ml-wG}4{y{(Wv1*Qh;FKW#<~<UT)yTB#eZ}t>Y03B
zfdd{i@K~}Amel|`hT!{$E~-+)#d9i}71rOfY)jNHK+tkVBD7XR3J=FL0}p{Mg|*e(
zN(Fwzg?xDnic*cO8HR=zgoTB(`}TG$^ou{<Nz|ibW6K=$SOeBmo89Gekckjax??_o
zy*yNk0d$+u6iMD#56gXXZZ62swOC}ch>BYHK7}-6L&K2wqbr@xdJhjm7`VByz`GyL
z^z_83mYP;}4Bazdc5iA~#gZfXo@>@`34s(jbhdT@%g6Efgei_M1*f6F3jpcoi&lLO
zo8DNLOU=pYnRMIOI*%U>NQ_0z*0+NWLnSs}|ChONR!_(s*S+KRheY^!?r8Ya&hUDw
z#GPVq3hi%C!d5R`u+EdaQh_v#B^+|@J#(~_X?}QIr^av>&)X;@=K_Ls(#GY}0lMZ>
z;+du7*J$4hQwYLG)N5U1=~p1)mCJsIrVSS+xU6V*p_RuvISteRn_<80DmJPRT1oLY
zT);p8-GiW*dm~vuoLK^X_!Nj(XZQ?Gp+Wr-ff8Ph>MqomOo@kVT77%_d1wQ2$Rocp
z)Rk%hT7ebXNu{Z&=<Mw50fB*C8Ns9kfv|@(jE(7hMgn*q)*|D8$UkyX0iW|=<)%V{
zRBR}o*DmKG@Ja)oGwKWi7Z>+(G#o2lY)rK-#UvyoO#IrMUY6-q=R2sCnOEW?zQY{|
zKKGfJY<^I2dV=%~JmbK3RS5ajUZmP?uBmW}g@wi1!Qmd%iAN~fm9mv5A!5D!L;Lx{
zJ#b-H;u8|OvQ=0oY97R}q*YW@d@36wbx2qE5Ed2X>*@J+BNyUv?pla8XbKFTJ>!K=
z;GK4GDzId^2)Du4kRYsEuhRK$hEfVHu8%D&vUBx%O_&o@yj=FT!RIzZU%jPWO$uFo
zpP+@@kAJlS1M(AR5cG_UQxGWcA1+y0Pc)p(9!j)Xmo5_SJ9C<Csb5BF*IFhf9`fps
zQU}y0o{ZIwu{oM|)EB!SXBi@lGpV7w_;h7>j~sT(l``!w?N$&h%h6bXi&w@%obd#&
zDy<IeslGD}4d`di^k~lG;FyjjCoyt!OJXDDS61|U51|}lq1+FZb+G~#;X0A*b~fA>
z@49(g#`nhDkxJNzOvUG^0QJPiBVjEvxvd^A@a(6|2$5(;_qiltwt@sD<ir{)=KPK8
z;o9H3jhn`CL1Labh6;at0PQNMo!}EIbLy5qB(IYgcGS~Dla1%`BV-Ig%ltSXXxcLZ
zYH;VoYN6x!E=$ba>|7ic@F_IcZ!l%%D!JvAm**G6hlew?J+7%S)z*&QyFp2L-+%cr
zMWG-ZA-EWONluqO>OG}^BHNWDe=$F!Dk+R(x1?p<T-jUFb!u66J@Vhq)Q<KYm#Off
zv24EGa*o2Rc=us!$16^Py{GD#>BJg?<ZkZA&eE#V=*D}7gS^jb)h|-by{#4{KAEPR
zPeasixziRs0(_Q)lvDuy@$sH8TdXh_R|nI8R)x~=*4`dT9u@>HaL}%h7D56&hwuD+
zs88qQ^0E&!K|G*z)GBN^qQBVjK{nuXVMpR|CcVX%*B>fC(p_oB^>{~p0?h-qAgEwd
zo`Rw_{WHJ|j!!CZF33p*Jl%VEfok50sj$!n6*;a$f$$um0ic<RZ2ozE3LgPL!=)1S
zTsD&=J!&p9`;{T32uA=N=p7s#Y()rk3hq&W<!Bon0LVwI%CRpvRM2Ua0<t+1OB$SI
z8-qr36Oa~a0ekbQh8Ri=Z~$$#vPnX8(y+WK0H9{l<qr0M-RZwz&zGK_etW*~Xs2Hb
zPL2K`uPS8G;ByZ2Pr1Ir;~BhYwW>Y%C|W+I>R=BfaVWTR9USqk;PdsZ8MCA)RW;SQ
z&6#$wk$of*COr+TO{^A$gi>?OPfLqYC&CV)P=Wpw{I9n-IDTY_Sdg%2)&uNflp1-7
zh${)J2~Cyos8d;{lxSB?d|GNc2c6aw2U4*jVhuWC(4U9_%FgE@dAm^7e&NE3PmH!Y
z^*QLh2KE|9Eyl`9-tWduqCHpnN42%~52P`~-=%AkMBCXG1uy2MDGjfKPllG9Ll1}z
zBxa0o+DAu)#6;>phNOwnl$&Ugn~n)JWsU2eC#ijjC$z76YV|F?j=yP-g`1lk3W8!o
zZ`hsm*T*Ns)WsUej7zT+&txhx>piRY6eV8shGbGhqstXH?qZqM?2YHPl?|zz4@*5H
zBVw;(cAJe1o&WZYg*bn0a+1N7dx>ygHdk4HZB#2D@ZjENq8>GLso1w6!^6{Vj>=kF
zW52$SM{|p7$B$k|TRTyHM3tDS1WZ)SQ&4j8PxIjAcucYf1i+>>CI&3~R7SVyOa&4I
zX7*_mFiFz7-7nY=#4DKCCJ>&Tv`y-}vb~|KS|W(&i(4guQ6;gkeae7&WAT_bqCNf7
z&a7iu&QF!bn{^=(sh4h;%IJ=GogX3MII4N+7aSb0{KKxZqwz~r()}Ojad6hbrM}Ue
z8~^0pV5_T34gEakUAwNXuGYW?K_Ntuf4X<LbZT1ES!XjPk=e`j$#TY)7XnaUC=uUZ
zq@$tvWX}7CvDiQoJsD_x#nhpbyZ6&6V!ZA&3R5sa$n9fWHBg&2Y=YBVx;X~NVDo2w
zlT%Y+KqYj#H<#qUsF{(OsrrVC65;CRHu&%Dg=Tto7N;G~*UpoHmC7-kw$s?s>OhBH
z;JP_2Eu9FZ#&4;c!iV#Bd3bptHweApB++ZNNJ~V0f!^d6rdeMOmxcs10ii0RC9om1
zPP**_C5`p;XT9UPiVD>@iuPk99(FtA(dK)zNhsYE<Hte4;nGsSM}P9LWey+5#UFE1
zQ{K{%3^*oGL66BXB6U?@h@AL@m4OpEzi7_~Wi&m1k&DgFno%D%6u}*yl0V?0g1^ga
zav{T>a`W*T`6N&7ERB#*t*G}_?3I3!t5-XM7-;<)P{FW)`^htmON7mzu0V=@z2Ut4
z8@?TyeI%B;W^|ngHE642vsUB#?ym5^`O0b5M@K5a(~!56ULZ%InF?+mS^$(|2#NbN
zA{=*2Qwv-VHqYt}c6L(f=|y*>PR!2wm5-{w;2t{)JsHcC*Y_1zSTKp$ftDak`2)x$
zl$i)p2~)D(1OZnt{Ek!ysECfQtk9*CVX2fDv9s6Vv_nND#x?O6>5*UhYHO}pG!=YO
z3ov8c96G76*^_1o(5_3o*%lK{V<8M&9eKq^$kjM|4HC_jwx}C1^ec8yd?3z0{c<DU
z_#r{!Us!;1V;zi1IhCp-DR(77!j-Y14hX^%Q)a)$K90EE=w%4fppd*n=DQzbHng`7
zr@AGwPZ3B1ud~WElfl6s^{LTk(Bj#r<o#FvvYjGS<VJGPaTe`1$q_3b-&@YJ1Y8jd
zG_w186~tb7KgORu_{N_mWx-c5vbJz#I=i`jD&K$U=Fn`sERJ-+r?KuODvC9c_r%P(
z6_4=B9;ZbX?Y8ev4SnhA&;BvFqRC3+R9h2=iQ#HC*3zwY**eCIeC7=^wRau4l@`AI
z$m{#p!0QG==qhapiP=iKB(|zm!1qD<h$bD{<u1J}t1=%{Xxo)J8*6$~Jy)3{dxtLc
z=)&WSp#HEjt1)@AKaB|0P#94H=Zv4qYK)H(#egg&3<x{}AdUH8^Zomvy>|kFg6wv)
zuhiRhYMw{k+e?4tP2vcqDvWf|@|bIKlPTRVuBxagV*f|PP9Pt70J+U;CTrDOA#E<Z
zvvBs8il|FZKf@e#U#iMx3R6L$$z}2WyGt*LZ)KGp0Ww&3vMI29=Ri3}mF6b$@KE<~
z+oWL&0ogu4lu()8n#<1b!)^zdEhsCmZuA0<r2?$Zr-V*2WMEpAMT_|=$;M*#sW>nM
zhr#__H@<yAc+gqD2N>8~Qn~{>!^uMl*)LwgM%10MV5VupZluQx+&T;nVm&A_WpEBb
zw>0kPw?}tKJ$TRzC5aQOc%{qGo=X6m9Yd>TEFl?LAnG@^W~qFOvKUo!M`gu*NJ)IA
zN+=%L+uugj>`nmcUL)$wdu6Zx!d2a{fJ}Dl%U21wVnO8tMaUo}wcp+ph?Ih(BtxS6
zAr(m3-4wga|EV#}FwEQE|58dy0-I@%s=)EKaDncpxPVs_YIAp11hK~_8h;F80K*OY
z{=O=us>$|z6}Yy{FyKCX0mZ?z$o{(#v3NHxL;#f5TaIa3V&>}Q=+LYDw1b98LT-?4
zRA|Nf6poFJU0@=3y3<bv^*?MA=<WVsHx?fszdjw=`QS$=MWDl*wGrT;qHi6Mv#}un
zgk+z33lNcCGl9d6e}+-EdOrjLt@B+|J|%EfsBCFO^eZCTpyuAAUK<m`E%B<Ndji=4
zc__`A=gpaqsvA>9oF*n}#^>f()0<l;zt`PyFo(RMyiw)-r`dd=T~>7~ucu=Lk<y=M
zg4Ekr$2{;~cn_aPfeaZi?iw229|qY&8CV>(ZdlYzOrQ0TmnALm5Y#d46N`(=$k1@i
zFL%Yod%{xFV%}arH<rHQeM&GGg6kP`{(Ei|MX0^v`0#}75$9L?@v42zvySg$@q#jX
z(X#V{`tN*XDpeJ1Iw#c9b&UIUdEBR!KWK*Xiwy_4@%Jl4>f=iW3)hf41Xo^d$He7?
z8ddR4jA-|ro#jtpeTXbbBA&>7H*6h_VYTPjGRCJkv|JIbbbs&EOP9>Rd{f+@X>jly
z5H>XTe0aPu;<RM5s)-JmdtHt-NT-^)CCdXw3o7|yZ_CTM0j=T%{cdlx)}VX16;i>z
zB>>d|d6P8hrP;_wLIly^|6j@`@SQVh!ArQa2l?UF+fRe+(c=%#TplTX@EmV3N<}+5
z9YxUaJmhG?AI{1y*A~F4>VO+mB9zjiONdl>`Br2b^rYpN=Gg(&0aVZ(C6LAk-iNSv
z>goS)_!#P6sSI0Cg-nHzKq|6*W}wc4ikQ`%<lDDzhW$Hxd#$kd`OPK9F+Q_``(o%<
ztFTU?U#Xm%)r0B)!xr>?6%TyeG5Ty!zE@%j+$ENyms@91EN~5*P<LI#J=q07>;nc1
zts;YS+AbDegATy47a)AXLmgYN1N;^xZG|#YQX<-k`|BGp7}p%iZD;Psnb)x|N~LvC
z1LdoNL@6X2+s=d`3gB>{SLue-)jI%FSjPQ4(bU`=OYxY9fPm)QXQNE!0G$z0L|W=B
z%3RHEwfDHZ-wj+&dbcv^sE8Hux{N4ffsVFys)?C8^*wZK2EdUNcW;FIoPO&l-LpEE
zJvRF_N=J>SYY;Yp8VDO~gJREjHaDg=995{WE;i|c38pAMpYOhm!walL=UsM}8%~a0
zl6&9Qj!#XbH0^H?vH?t_&BY(@^tyDnY3V@un$u4wormi;AsbeGxEQy;TucN!Qyi5*
z9}w%Aa+l7xgq%C?!3&)ay+i>okr<HoyOv(J{R73yauJ|ggg>CH_WqHFszO<AQ`3<j
zw9=g$_E>m#cA(bn{K?UlCw*O=2Lh-}$(&t~*b4yKis-aF6|TjbfC;^GpzZ3Kb9QW)
zR`a7h0ia2?O#l(3TCuL>y3@-HxPgcqPUG+RP)d-rmA9JvW&y#<wKg3E1t@ji()_%$
zvC;gqvJ;jq>opP~m+g69z&@*Adh<ixV&sr6HFXq!Xzs<?Q-3ZqWg3vKnC62kusN+3
zi>W_-dJUq46rDcf+hD*XLmL2Fv!4BW4no@4n<@;EdOy;!f@{Z2rKxNto8)C;IUc`x
z$8fuZ5V-Fwax}?;AtIHo#1rBnZ1f+a8Ju+*i>)oNTr9@Bdc_OsuoOH6Dx0IIv9|o_
zc5y6&=ZVXkI~K&4cp;u}l7@DDs26Y;JbgMuk4HcdeoIkjnVV=le|HBUmzlMrYi4aX
z{Y$Z``6K3h`oHyDEwD7o!hGZyO;`W!eKjz!4me`1A3FeZ?~e)fLgHMl>G{d)jq$R4
zB~FCxy(0ddktG*)54g4a$J=B*^>D?`8ti8#5v$yv=Fwu3RC{;v(<%q<W>-UNrJ)B)
zG}HIS;?+YWmzMXl5zjlAowCoEJxlMF@`UBqSJILxMv1VpQWpgiYkxCEh!|E<aFF>N
znqq%oHd$}V;4@j5%A_C(GWb4^h?4L-n{ngdER89e%tKOxT#MoI2Zlemo^DKfOaUW}
zS5;M&&@Cn=Y}mvHijDAqZRQ0a)M?n*@WIwUp%kc{pFhWW3b?}RoxW49XEnzgtyD}m
zZg~4k_ST%8!Xkmrys*T?(bPqs0E$QX+BM@-Q*;Y;9Gu0LRbL_etb4<2=NIPKDfq+X
z2fzv_6J0mYO;Gwn2;Y};fD^;2BOxY+9`y17o34n5kH7!YnhtE=q70Gej^7u;W_=O%
zdLJmG3*`bfh{x^la`Y_?C|liGWLyJfpHJlH$LiAq3Ez2)m056B1;ZZ0!`mxxvb9%t
zdKIXIMNCbZJ+oX~ij6wG?!S9-_n+Wb+BmQ>)e37Gh+|pO`T6;$0vQwQ(?W%Uz@ttc
z?vPj5&fvgq_Z>8AeEb|m;F!=>?~2Na0^ev>+X^sv0DJC3j=@nlJ$YxV5Qe{b6Hu~!
zyJW+{8+tCz?XBC{+QLp|v}1I%TD7)uxWv`@p%OygwS3LWtZy7Wrd&eEWxJy(D%Sb#
ztd?uFK0t7a59FzhNgkA9va&1?*y#?HERfzdPEL0RWWx(6`VB5S!*>%s5@7FNMndg$
zACUhRMJp{?X)s?CRvyT>w!J*<8dDBIIywx<?L-*OXITtw)A3{2N|p1!2OK%h#)dxu
z35n6>F&zA}+jEAfLV9ftdRwb$LiG#`=;8R%WuU>{4_ZXaWEhA`;aUTwW>}Dk^Su7p
zFa<F1JIpr(1+PL{_3{f^-uw6>kidKxSBtXtfP~UW!qpn5ORLp(0tyP2)cpMC!K=tI
z8LV%e_W@r6`QRs;smdUl0x(GvTNjU`LM;83pSN)DpTov(BDcEP5=iK81DOUuVE6#q
z!pFx46s!y7nBRFHzzNj6=xEG+*q4BA_411%z)cApt?R>yt_=lrn3*Yup$-Kq6g|0z
z?(UQj9YXqPV*`tTfF0e-OSGX@aJ}9h5X?1DIP>c1A-A@BOiQ1R!Do*h^*W`?82J87
z{gJg-dGNj2^;bCtwNH-h>h3)?AKVm7O(n)@{R#-pPJu1F>A5*nWf&~r-cp~o@tDw=
zTn!iLFCe2KVxDuba(uXSM*uEFlMBpR&RZSVq-3h03UPV=uuK%H=)O~L;^S|A&6@~-
zEQIyJ<~15b7F3>RJ6y=-I!}E820YOcY=Gc9bGEecbGTEg#js<9Euf9g<|^ZUEwG#G
zbl&b_^l?1>X_pVon2lhuB*3+gK;ZbIk5ui|HwEI+Qd7$@O%0XOM;`YBzu&EeItW+`
ztS72IfBAAWCWHZ{a_QQwUPzc3-l+#lJHK>o1c0wTka8HDiHIZ&kBsz&F|-G!Wn(8e
zRT=lQ4A8(K$_y_h<*ILe$o+SW0Oq?w<yKPhX$vw&gAt|NInH+jKMNhbo_!U{l9|%m
zo1l``JyF<LZ*+Hheq7rwZ<!W@a?P03{F|#>4ap<Esr&McXWv)7>zYWglU4nxp>D|i
z=+?()Z!gx8M9%o+Xo%o-ek@PvU0DBg*0)XfrT!5Y>6F!TSXG{9CphZg>4mC=tNUw~
zl7`_Ue$J@lZs!T1^C39ySkq=j$!0V{CA!eL@M-@=Sm|trUlRt388IOm{E-1DctGe<
zLIEtl_?5@WmJ+bCjj;%Md`%Q|*4;FSTqEne{Zj$u#o8g;V32w`q?peU84(edkZ{4{
z^lhZ(qeqWkL9TgV;4Rj1&*FUu3H?<|jKkAkK`kc@td^l2TCyKjAMc*_UICc`;Q#g*
z2No!T)ecbL(1kuBRXD?xsNXW+h;4ImLcvv%rr<<u*v`tt6oxCYzOg}o&b+%iGW;G7
zN%+smhzz`dWJP7A9(+p#aso2W*m!u7&dxm0=bp&d4)8)$nZ~SR3p$Z>yWa;NN*`xc
zR#l}vN)nofs*k}{s6asr)frF~ud&#fL#4@408E+DC6y0~1657{4ZNvVbcT|06-wER
zzS|(#CvdW_?|ih;YN{oC>(+&-mf-S*Le0V__j1t?ct<w%?}x2k@uBXj82(SO-?;o7
zfWDss2<Ye+z<={V5sM$)R<$(vLr`dFKb9J&yD$_r2NC831dX}O!2e7MH9E5I9TP*c
zC4r6vzL}Ysm}D*_L|kJARnrwhw6+Gg2q|$#y6e{o9>koGL(ghsfgauWLVcs`J^-FH
zKn0%1{U{(z`|5P3{0jt-h>_GD@7{p2F=51c;k>-O`5*7dq1(?;Uah(L9>lAUzSib<
z8Lvb8&SaFzD83;n#5|;Yw=doGm*}euc37%K;i6<}RRD{RDj1cR;5`@x482!*d1%|t
zB|_FTC``azl&T4um0r22b3zGDp`r5;#o+3~LLd+%r%Hw<mPT*P#3a#ja}Q6{nnCFl
zwvQtE0Cj+cDrRxK`~vzljlhwDPgE*rE85fATK;W37;*@uWe*Vn!N(Yo_Q|K8Pghv*
zf`me{P90hVsx*dAb?V=UO1VRKd>}Mx%G$;QE1`FyAhM^@-F#Vec?20pe+>Nv5c&Cj
zOQ>4xHsB!hyBJ*mJ%!+OiM&K?T=p(=6b_`^pXMI-FAq-oDne?wzMh(fCvm}DfK2#U
z5ve=f5!XKj4gOK-z->wmv=ruAu;~xoMkMEg>6_vK0mSR+t*!F~(v)!E*C@V?o&1jb
z91x`X;t4t9ef#!4%?QK|(Gfk1I1s0PZ1z$Qz~)i8*&4CMK~J2WtIk@N%8Whkfpz_R
zMrq6B4o<IawVP}R;j^d<Cu+L}inLnq>KVQ5Az!idwT{1$Y%Tur)CZPmoz+vi2i~1|
zd{eP3(Y^ic8JBs&^F=Eq^dhJBEMK6vV;K*G1<sd2^6pBf5I-JN-wRA@;<&Az%zxM8
zvDOs^WwKk^j{wDTda`B#u{56JW32XQ7EUsRTt>GZRBP1@p!B3q#_yPuehNK&ol9D)
zP&QxhdHm>{32W_sDn3}Ta-OEIkQ?&th4-e*&?3_cXO9Bou7;1D8+*&mklQXW?6}hA
z#+A(cJ&Tu}-DQ1u_%y$76ENc#;2*He|5>3GH&6jIH8G@~o1DgSNm|%6?q~Ntfl4VH
zLI@O@m2#hj!to2BWWHKe?nDe<IWr*n0jIG~K$v2+RQy4aIiBC?B9xM&tBqF9WI+Hz
ztnj#dy-&kRy>t|S+-$(04Ux&fHV;q?(}8fsa>dAL-u}R>MO&YPJwQt{drc!d9gZNi
zXxKkoY8KOm@B~7oWyI$RKz{UwMgh;}ZL$DXp%XSZ1<2P?5D@5<2}~8Lwdfb(mY?<X
zI;E%>dBZo_Yf?^#&BnoT39R{a&%-Csf@7bGfcFkBz@V2qHl`#2+5KQ+!vAHV!xC}4
zkQ+K=u^XDnzzMy2WsmwlnAj(ODwdXvB$g;BNnPipB<FT#luqJWBEY4j&~tLI-d(<a
zQ={w**hhJ3twdUL%3b6-M1sjhMY~?}ARFKetZCtq`dZZdrRu?8y3{li=D7zKsY03o
z$Dujru2|)Ia0#Higo?^p7TTTQlT<%$3mamPzJ08&?pJCieD}%ZHUHzpcj@#Geq5w{
zRhab(k`Sm%0(f6J7ifmhRU=o$3=9o>-sYR?E_%o-JQ>`h=H$d^k3PnN!^YctIxw2+
z%_LM)`!-942j3U$dF+j;pb637PUm9p4eJxv7lV5pXI-F8wG|B4N26S^bXNxqk*LSC
zR0&yaF>L61xF89h?|2_j`%_SW_mfB~&0KEu$J1Ntdw8cVz+y?LIeh5u^XG5rtpIBG
za1&LZ^2;Ju?kcUeI(Ya3tZ&SGUHC4f_yH-gr*_b@Y~oN}uI+pA^UatkMK8i=Et?h$
zk1re31h+1|v|{y)zn|7P7HYcwQ<~S&h%YTQ`uGd{;>eb4#ai;k4c=0nrOY1b^UQ_o
z89yq;F1&AD#7{C48XxUd;3bY%8eciXRl=9tFmI$_^Dd{)BB$nk%W|5n<_)eSD<?lr
z%2!cS)|N^mqd$V4z3lzbsj6pBdOH&-LiMdzceN`^Up;fy;(Tg!YMGf#seE=X2<m)-
zvTcF+pzZcjKh@rt@TWyUngTf(yYYA3YM|)Y2X+vMj_X!|e9sRw2QH&BBv7xiII()!
z)%gBO@Qg<qkV#oB*=YhSjF*=;VjBQ6DFFFsTT0K#c@>-(@OANLCFjqP5#N%gCUKCH
z>aSW36^@pb>aFweh<r9D$d4B)u*n41?1+vD3-d&-R#7eWxn-YL8KA&R)6Zd7zuTEu
zQ()2^O1#s~C>!4dBt;to`k}qCdw}|A1QKq~oSd64*E)Op%DHF8IRBX%G1Uf)xZmnX
z<2rm~3W84H80lNEM?E@_;^9+{5(05PI><rX9O?@u=LUp0byG{r+Y#A&_s)V+iwksr
zkplOm+=r&Qx0WMCuC7^?ffpcT(sK~Z)vmeH=r5@YltHks<d?c%x^#(6uR;9PRsOz3
zqejbqR97@d4eVMOvI#{W1%f3GDL@=UHnOj)H~UAjn`!A4;Beur`Zn94A@hE1q$*U$
z-BkJO*(qotxC?c%Fy*WDopOK$)8iEq8eLY+fz&nTshu@!+rS4<Fu36iX=BKGqTpi3
z!i|ooOecgB;`cgQL6xKs;B)~&K~JDz$h6D=;0%1q81n5s#YT^gm$v3Q%L6(EoUP9o
zc03o4sI{4L;&B%kW!ZybO&+P>A&Zai4hOl<hr<`*YHHU*fWr388=Vwo4U*;i43Q~D
zoujbRq1x4AN0b4b3g@L@;nO1w_1qb60XXxs8-44BLwVCQ(%1LwK#hyPP{0%ho($?R
zy*MUpH%s4_uS2J{mf$3G8S@N4_6Z>?RrWCvN(yW?llE|Fwz!Ov5?rV%P_wL3+w*OC
z2sJjkOawB{F2n!>F)&3EonLChvZ~(53oA435+)bO9H~3mVR3acGi3h&pk*LhQ&^hI
zdZ?=UNapP}HT3v?odv*eOUPB>iKBzM9A=FaImlB>vgy|AMy@ElQ=nlmBzdBrJ!H_I
zr{_Ey>oGsZ%EHpXzgA77w${ctmm(ReeK-S{m5InlspKVzKzbHv(oK13@j&PF`QV~0
zFl4gXPA9-Ik4jTZ>)|Zw9>4=b^3L&fl$xU`2c$*-2Nsx|TxM-+oAqubh8j@lO|7RU
zU7l=+uy&$=08(F@sa0=<1--Jdk2Z8<(5_d^hm8_w*nsZoR5v94X9JGN6$|8U2PE$n
zCl_B|=Y&j^@i7uWmi4faIRpqbcMW;R#qpmUbo#DuZuYIUe{|59550GH7P5~*b57f1
zbO2ExX1SuG6P8!23t~#l(^mZ~Z&q4A4d3m(;5%d#m({+r)W%@s!+9@PneKK8U0pG8
z#ht=gr-pUGW#osG%N%5f&TSKO4BmvEmx76}KNWd<|HiqZeo}#W&w@VNGauWMJ#jxg
z<@+gT60S089kZJ-&0(+b<@>uRT=j&D{SUn2-toOQaYlOP*zK>r?N4wV+CATWDc|bx
zlr`Yp;P4E!T{M6gd~R=V1nd^TcLw>4!VMGf^M%*<=(wohNC}V<I91(E=~9G#PEH=1
zNrPOxFbya+(+LPr04s=SXW|5efla{AX1)6J891fEEL|7zTPdfEe|HP1%pvYcvhXP$
z9#ZgV_rMG%paC-ohwEFCa42LdXgN8HMa!m^mtVoOKzGi_IQ%$0ogOw$O!#HH0GCbR
zN+e}}at0hiOCPkgk-<dNt_0e~(e)8<Wt{YdBX_|TQNUJruwF_akt5k84Q;b+O13b^
zd*93D_oK(T+E4DP_>V5{dz%M0XwgX#VFAK?>f>#mAE-UA1Y-j8Nraoz00$W`f}W*H
zy0gAxfq{p2?e^RIkQ;*=tPwRbfwqwOAue1f7{bC516$?b><*8O^#V1|=TR%Gt6t#z
zKJ{}WY%6iWP~nE|>gjoD^%O&%?dS*{A0IzJIk(zoN%<VWo5Q1`OqA;Hx)8&=fOmK-
z#qWN^cE?gvXRRn9K@0V}aAb9MW&)=Z($L_lS(j+u`;~Fl`PnmAD}+NO8<LimcR-vW
zEH2J&*z5dNd1GVAePp?Bb~gF#D_jt3hsRz|FlkYT8HR>cQRwWesB)oZWyM0>*_SU3
zxf(m<P0+PWKsrDS`Ydux@yQBNG_0&7+?Ja8dwbw{P#G~GXng^z9JsF`<MjfxbBVh$
z2FzT*hyawuIc>`eiI*oFa=LeCVA%`KSy`eXvX!vVZ`ZPQAUr$L1X0b@5PxDIax^P(
zP`R;Obq_$3qW13b<z)pkq0*1&=ZULBU@zF@H$%fjKyMipDiCT~!aF*KzfO|=fon4N
z-&=sbSsjnzcyt81($v!A6dneGme$WMUW?Nb&*3a0$CB>-(5DsKCPailK3(b%Pa#e~
z<~v?@0ZIhDC}Jf+HUqlH2mm$w2fo=7n!(3^TpNz3hGwn`>j?@^J4ZFt*$Fjy5)$gg
z#}}c=q=4Q6@IvJ2=5V(kK5&P>ecsK0)K*pX1ovJ#FSLBPV*vB>b9^Q`W=stFe(A4i
znXDH*c<><n_3ME2bn&?DV9;8Eh9~22x1gFbtXyTto#o%YPf45lo<HNQB?or$EyHvg
zB)ik<&*!<Ql71D=A}E#qA71wS0QAJCqGEkjm~G*z1!c7xxn%4DyU?d+I4q^9NddJU
zT4vJ|i{QFfp`nuY+X|5OFZ>ahIjD!i2Zm>PBV?0K@DaLOvlntMn-XB+QTjn3g<}FI
z3TPC0GK0d!sF^^lORQx-8+`8Xw*1e3n_9x9o<Q;7))#Urk2gepUqjqb+oRcoO-TS&
zLv9VGW~n<nx>@8!@23-(EY5W*0xmPu4BzU5LcyVkr+7y=tl5u_E0_pCCx(vJKp87D
zmwpU7#Z}c%BT(M9-cV90;u)=3&G665|NVcq^fop&0BD!U6-7)<O%YtJdF}P{?L=W+
zg1%`rWvk95`3Egf*B2M>=$Y?wf{u-IrL%4A?ah^T9)-|*9T2eiX&>Frfx3Q?obdlJ
z?x?pr<Y9cFiYWn)i9mI;o(N)|K$4Xs6rg1R0qRV@@(uw+AS^82Ba-EP%s!8TYyKZz
zrSud!Fwq8AQ7fO;R1W~9moA+&^yQL+Q2kdNkPrKRdzsRs22;F8CPB~zlUb?KUF{t+
zbd(Z<2awlxe@XOzd6vI^)bkmfVdmNHg~=aRSO3BSl!UcSBM_CE7ju={@6(t{!1slP
zhqnY#!)>Na+g4hyc8<{*bguZXc&(%eeR1HZ_+pPhaQotx-{zyd4K=dy_hD$?7m$X-
zNy78gkxCYl9~7Zv_8JSi9M8chrC1rBKKc*)?i?i~7^G}fg6=G?a>sk(jz6gia01j>
zg5S^5i=@aEi2dOY-V!w0xi;E)oKVuZm<yZZnd9xq%gGZOd}&u}!H^K|5ywU9Hr5V0
z&f#5A<^!naabN%Kmlm+Dk%s>mP?u(-wZH)L(5WnFzkI7vMN5lphE;Owje2fh9h@Ew
zeNnbRz(wabx9>N1awI6WJK#P*IY7BcS6t2TSuvR(^2G#PM2$iN1y+`?wy<bvi|WP>
zmrnx&22THx(vokSD&7+pFKe|?g4TnMTrGm|V`wB#CH}fjU*Fv9OC*Mxj-FSfiBrQa
z2$2&?J*1wCu1jWU+&eDO_k3&!YCsFHFMD73L!5JceSI7a+Nx>&+^qFa-3?$UdqCCn
zAJ3N6@ZZm-3b@Ua(zrPC8$PJ9%mmlb$}O-rw?<IZy4$#0zbi)-^U~~v42X_Rq0#+u
zjRL(f^Bd)sy+;ofn4<&`;^L0=1^+pJS16Ne7-@?HL$YbhuuLsif&!LFV1!C_0nl(d
zG%}L#x5p$;L~iY259<H<oIYZ?Ck|GuC_^x1_H+C5k{?tTP*)optCL3>?w*Q^-zxt1
z;lgz{G2rtqPhQXfWoBjR4ca0du!x=)WJ&wr&k7ZOtruv%W%NIf_&i2;tLnHwut2b<
zwM`)S#35f<eZOM80;c#5RZN!9fZ`vzv6PgQa`2$|;^M(yE7mNQ$3jsvsxAw|{P&mA
z{<0uJxP^@-QK6umow<s*LESG)f<hh;2eG<5e_r(0^&9PwKr&{0`%2ZY<X@9(%yicD
zR>;ha?RL5&XZ@D}nT2G#HLaUOOmb%A$46cPC^V+OWaOzkJ#A`q*T2>ik&w$HaRUts
zm3!uRJru)41cRutGo65*fE`pHb;mF7VTy^{xpJZN;K0Rax$@5^Pn3y0*%=VIibp{p
zPsh3Ja^VkUU}%<|^MW;HaQ|IVn}=`_jI${yzW&2=DNX#bh#P+`;!;?|ZhtJ|Z|es2
z-Q9$crp>wh$0Ed<ot&ioikM_VL%@~)^b(HmlooX)%etr)+u9RhY_BO^moy*`ZW9{p
zgAI8*Ur<26M}!{Sp#~J^VGbCO2B;}Vjs4$VpB;Y<yY;VOw}fF&;<*%^>6@LIi7$%{
z$$z!$f6UUwuj}!(6&0j_ga*UC*!9bBrwn6>+0|qZXRz)X2*8FAZ17ezi5&9qaZiVU
z%K;kEzEK?=A3p=c+m%4Q^$Za3hP20j+(#zC`k)If?eKU7^Anfk*`Ij<pM}`LOhL_B
zheypCoX5LAoChy8bXQKGCr?xgd4z`1l~9#omH8hISZif?2xiw{dRbO)ON$$rd0E<i
zHP2@sB;js80GtaJfS2%a3BrR9kjV3*dv6c-=#U<;47&eo8T1tVTK?BcVEGGEoP8h;
z5w|E5qTC19y)6Ei5L*hrxlL%hMalZE5!hz_Y3WFgUY_Xu@2tXI(k&Qp8~T23D}}CS
zcb{fGI}s7@X@F1woaR3ri>a%t<BNbyy<hA8fiX;g2kJPDK!Cv=_K%K^g7N&d4pJ4F
zCstN0HYt+oBtM4_;SFO9-*wB8&3Se#Qh<5ajYuF_T>K74kBS%83oZua_<I2lly5u0
zAPB#JdU8DK!S*%DKMX(PzYIT9@7FSTU<!Ak^T%B%-t%AqJrY)|vuFRbeu{tzURMwr
zx!ZB_X^igIesSTc&igBM>HNS-x12YHc8#`(piyWy#-4GxU2(YM;I6ST6COScKPje1
zQTd<tFY#aYFW>lU0Yvw}0;om#=>?F~5zFXCM?iQAsRMpx9Fz@(V*tPBRd@>x!IwY`
zf}5x{Ir8V4Ot6b$>Tg3Jv;<4{RVrR!MF(Vh9pBLO%1c!8$ZmJwsJ6>1YTLUG1x`M#
zhjI-NXKadq&thw=Rm$k50m(O%o&I~8#893w)BVq-Q3gwc3aF-MhI24!(GfsR1SpXb
z%aJRH@!46-T;=mo_nW``ao{L=Y%x^gm6Vj^4(;8&G@TRw%Ysv0D=&trX4N;9DT#_a
zFX<C~r!=0Aeie^{pzG9V?OWP(R(rLVu#%R>+K9B%r6R0LQkpNQ&(O=WnWwT<)3VU#
z1-#(l<O_MBi+D;Xj@jyq7NsR3KXFga6-(T{o-X?$51k8r*x6#Ih|#LWW4iZ+9~PId
zKR<B&*4Fl6tVT&|=VwMzZTaJ!4p}x2+k39gwvX0UJPz-2oVYl2B6vOK13rE{3<!|Q
z=q4cO8X8(mMq579(b3WM{rkF8|9RGX8X8pxc)BNlimv3-tkqx*xC^QHy6aZ#60uoh
zBhDNG*>!+8ErF7f67<tOeoUwZGdQ|>;U@yY_Wkzl+f9~LD}635%|S$kK#tW<hZ}g(
zg?FeYDNw~iwGd?g^-AG}M+Kj*I8AhE#^i#-Gc0mlEDFIpL^=aYQ3Z8t0x>~LB#sx7
zxBS0J(bHySWzo^5etbSPCYFqFlz~>;+uYozBRdV7&;?Waw>!n~+#AI(=TFKO6K4B~
z#33a;gFwFrT{ifjWd))waBAr5<2%4Wc%r>eNuhzf%dkroq>+Ineet;uO|S5wsPJ;Y
zSnhnFps7NkiUrK^XkR=DI(7j@2xVN*+5Dx|8n@PnAfBbbJhVLlZgb;c83sb=WTo{H
zL0isL@fXh3s=5Ox1j7@IH>Zd{UiFB{nmvR@=Umozy!jit$@mEDZI{iM_8A~L*-ku~
z**Y*bGkZ*dKsX0O6MIqT=}{r{{XscU`ZCU07`Mtl$E|>Nawqu18^u!g?KO*z1LJm;
zCPFiui$e8x-UwIH))uJ143Fi>G?SbR5MDj-;(er{p@EDS#`Z!V5X!&kfs)a=3F&}(
zZC1FmM!Ub}mi*b8V14v~Ceb09+gV(Cbc9y~j<1*%`u6+Cy0>rN!U_Sg7rwLT2+#h{
z(9NC(gb{nY?{!Xgwzn%N^`v$~-M{1Ur_$*JU@2dIl7FZohQK40512K-_p`1+_$|Ub
znA1?P$)9oW!YT5I>Z87ck-J=iu%e2Jq=SP4=oYq!o*lpeJYa~QpP#75vGEB8?(qRi
zP99$7(=c#xb9PGeSldKw-%*P$s&h{N_;4p2M8@JefH#RH<|TA$&O<sRFOTIO+$6_`
zyu1*g8kKnX@Zp;Jg9q(l$1@;Eew;?N-T3XtkXC?;4olO1R?tAUqyGHZ_D3-a4rVge
zQU-mSIBF431;gOXfR}r+O`;F;&m4~wrqkB0w<e-pJ=t5_@`r!}HPf^|7VKg5SsfjG
zA6lfw*tV+yUW5`Dry4WhX%B`3&&8}I$t@~f=MIlw&!I~P=EF4m=X1!NL!7yjEypAd
zK`;HKz|5>HAp22dCc1FpLbz;3T1}1M=0UX>8ls*hLN)^${Mgxn%U|l9Ld_CTG6lfb
zOQf*bduMBg&Ql#HQ#nS5xYDeuzYVp&$7dKkFu+L1;mc!ME_U1K#$@bH;K27=*!a}6
zPwZL9P6cj}offG)diA-QgS>7_llj~8)Ej)8-b+V%03QsO5?54G+RKCX!@ZMR*f`@+
zgFHZZH=10nl1CEV3gjM`BRgpacx*?r!oQxXARJ|C(|^s*HCQYUadfkLdV8BIZ1m~E
zrFPYHN==n=)JvK9`1y&>ArOucU@V}10EJ+QZ8g@*n}yCB5ymDaHiDDS4F-O#q{*xL
zk2iwdaKayMAD7PGVpVE-q;s?BJoym@37f#fEZG(t!b=+`8*Zmgl_6rZLP&q{BU|Y`
zYGIGeV4JBHN!sxF;#z=^8(UZe0}#j<T~{>=7R2oA>?pTqjctuwK=VtTpy+6aSz*t=
zmKm<Xs0$vhq>#$fvL&qJ<b2OhVhHMjhcL~rC<XbTH8rRVxYUHy)zzQC((4)-$yG%l
z3W60rDE9R9h=bdMzb;!?frJqdC-A~@)C{elB-{OC$%T+cJ!l!sf7D#%cw;qmEH?+%
zpKKGxjgR`J9#iOk6)iGN%kLGxUeyZlme{>)aeDAWF&-&AveCbrLJ;y6P)RWV*E*^0
z_==qKM)&iEn+XVr`1B|a<^-U_26-7@Jv=9P|CHwQ46fdzB)#aG_r<&)?@&|+%{v?+
zqFaT!%g2u&w{iPQikFm@f^XL-DKD3Vla@VnrU7tadh1y;210k>0YfCD&<LR8h9g!6
z;?_*4lR&;M0$E;G)&h(!sK*bQdoF%Dk9Ax?*l{%><neon<*|Xsw#d_*2Q5i`43n|Z
z;x|oiG__m!stzj!>{8Y#oW+dMyhpp(9Z0Gb8xR;3_(oYJfV+oea;Nm22c=N;N7_8+
zJCma^{<FdYRtrZow7^3#QzOjJO@MnA_fFi4L|T;de{QwMed>oqEx<RY?mB0Ft-!mn
zoqia1y*j(ztbpGJ-^xUQz+PTIr>n284}P8*gl3ivAXEJk6w{E+e|Z6xJ5Kg|LTuLw
z{6jZ|)zBJ;M?4-j<LNNr4vq`Y;UV%!P(#Z9zlYQbo%CWg>qW3Na6+WugdBrl8JCup
z%4=v0TV1&gYvE~bZZ3GqkE-RCTK0~P%mKd~&Rw#HnfF`d^&i^|%!|P|rBT-xtgkNy
zRm{zZ|13@C*EYYJcxtD^mk{#tBi|feeL=N0SVJIWll9avwy4-nt1kcfq<-w+LHw>H
zrLhn1c)NdBsn?}L;14VSiX{~yCFm%n18)f511^e)s7;DK0_O~Lj{w(2S_UH(YGdy0
zCAxa`YFA$$v4w?2S2vyYmz{t=_7!SlDMtM<0-_DSLxW{Cjev8#zN87a#P7bxAN0}r
zfbRW3l7_&Hk8s0Ql2-d?SU^VqwaG_jTN?veiK^XED#@4T@G3Q*PTP8ToX8Obii>%9
ziaLUkL9@%~lJD+rh_RJZ4ICr>@);sJLgW{5iG?Kf|1`A}aiDzo{q@=lTlx2Q5lk3p
zp8xT-9B9I${r-M3E^Pk4zb!%rbNKt)o*b|-|Nb`ODK!-Oe}8=u`9It^Lge>f{+}EF
zpAr9URlN54pQZBKp!|<<QvWt42*m#^mH+SjIQ6?T_1~gp7}8Q{i9RUuDSQZ$Vu%cv
zu{<LGZ6Yw=x(ZPpxWakqV19KqaCJ3reqkZRRVbgQUiKR7$JZm;3=E0~KN}Q<-+xE+
z+aBX7N*605!4dl^AV6j|Y6tc4<>i2okc)br^|CbZd71@#22hAK;81J+?b^Ch((iu2
z*QRA<F~D&;6~Y8KG!S79oK&Wsso#~#;FMQVf(KA%|Lvosn;fy`1{{NM&p~~C%A%h2
zj&M#gj|41WZ!Z^wQbd2#R{iy9Pd&z{`;uB(Zg84u^1HA^m(+O!r(lOu{G4ZQRGUF+
zS(!G?@7LM=bsabbS)fiq*ab=v_aOkx$}*k!GZOmSXV#fZOLyR&bMfnyrLUtE@CJ%=
z0NNQ2GS~km5cuZ@UdySe5do$f70LUGX^VQgLlAWs1+(`4{hc2Rub%wvi+}yI-q4`9
z5@r%&>5rf1d=cpHu0<i3u7%@6U-rLW!?X$C#DQ9h{t|7i=MNdI<n+bG|GMRZ;2#Sz
z5W3ztBNu@XNtRMlaxf_7_5JtPAv{;YI%ZR|?qgHS$snk|OEN?Te)+=uAHR1M^;obb
zXgr1BsFIKCW58i*wgkLV|9&~X7#cd1VrX_l%V#6-)P`vb`uDFO5d7ihRO4$fFp$KA
z2V#f>9)*9u1_EJ@(!0rg5wsBGtaC&5=0Cov%JUVKE+LwyNP2gy)Vm)zzaOruM3|%C
zw3&wQi4dWtjcLFB`#mp<6}fw2qj~CL(?_Bf+3&yMm?FbK-j+VkO1dh8Mmk%h_8-ec
z?jnZ=0?m`{>r)Qd-`7Plg~17&@$`7`JPkM$K9q?4`*{%}WB{6lk@NUuZHQjarYs+>
z@S9;GnCJ$D*{aVWeDrQc-M{hsjlK?FrXn3ZgJ>uaI+rQ;fBF1`03t%-w|hXmj)c$8
za*CYO<w-gt1*Q9cy*zCrjxictF`3YC=OPhw|N1HX_lxu{9_|)d^6!_1=wk_{{P&Oi
z|NT5GdLJ?l2+tEuyACCG{g!PZv$}&0tEuho&Vg$>`B_=as~?xXeKstvF*|S-lI2^N
z-XA+X*1`JMNP3Fi`T%d4=gKflaXmk-XWKmJ^kCT?Uh9z8(i%Z#!1sXW>07N`E{Ll2
zfkM%()(|2rO}CvrunJzLf6WW7Y2f?!voAR6*KgYz6w~6`0)98-?b}87^77Ks)`)8l
zzU;b=ZiLWHRd3ZQl$=<dI;#D2-3p~(bCiNi7bG|=_m2B>)KDCCil0}$|NMDbMf-pX
zxXgN_=r0ul&+GmtJj)>H^WndT1Zh<Z5QDRH>wEtE`D8tYQOxl(BaT?-aj!ArTvp8r
zw$Z&>!k|9k!>-V#4B_JspJ!~tJLjgFNpxNjJ~|RV0=bi`o2@*tGA-9)G%5Tk`M6Qx
zCiJ6#7)tnlPlnLd1J~NlS{)$kpB(od>odxQpM?mY96vpd#TZ^nSQB8b-Hfse>a(iZ
zDcfIEVO379vm5uqYTB!HdfIik(|=0MQaQb(QSHGT6%@-kMv7e7n|&kj%oZ@3O+cqJ
z8R~JQFR;;+bjM|^rNs}`iAo!Fe@D&ZXoK;|$q^ne&p!tj_c=7ksGK2vuW%p1<~;Ij
zZY8{Z=5S;bYHa}B^pJP%&igSiAh&ryVO@`gju_Olo2wOMsol@!-zJ46psq3eWabOe
z#+<M)8Hji;6kt0I%cB6L&=*p>=Lp%#c-Kuv)UVtd8-DnZj+;N`OKy*yi6zTL@6>Ci
ze_;XY-Ig@wn(9uL>b6H^86w$Dexz6I^ij3O^J3v0=(~R7HEJf1q!@MKPmpaD#j3dm
z(qY3kU#@5D4mxemcinU7n6WKHu0HnDLg>Otp}12UABc&9;rWfNtVn3Nv3vUaEq2UF
zzg@YqI5j+WV%T*EP5RvACo!-<UvbuwqC{i>61!WaBPl8Q6OiUMv$5w>AzNXLT<kTQ
ztlnZ_!ZC~I-3qn=Ql%!~V40x)mv?7l0)Il9eo<iE^Om1EsIoP&w^Cd!A3G_wa6bY9
z;g;<M7wAQHX##>S{pEqejjFL@mfDSAD`t0LQ&ZC?vtPMeKvCk!m)C9VdJR6A`T3!d
zk4_W;)uiBs32vGU3MEi4xEjguFbIT0X`u~0g=eS7BM7>J`?o8DA?KzIYpS`#<gxyj
z*VozIk17TVQn+M=4j$((Y(X+;k?>@1Zxm$T@M5hy54Pr_H1pvag1ZBPi7u-LG$ZF>
zt(H%tv~tROL*<z+W3Fs~y$1~z;{~-vGByL8@5%DONNVLXMa}06b<JQcI>)1H4|MqG
zMz<2Do?C&k;2Z8WA7>b#DL~J2+LQIv9&~tsuF9~{t)$LYX-2oAF(jb;_))7zUPYz6
zxwX@<*k(S(Zt4W-K?u}3@<-E*!ncOz;Nvg%s^==+z<|5;J>s32-iOAYOYJfF*2(`|
zy$Di!I0E1*FedI7<_=knR^yqgAjU1qkJF7UfYb&Z!95l6fF+36ZuWBSTFu^9FbAC*
z-x05+=qEifE(QR%lVFJ8?nu|@=*e5bn53g=NvP#~H?p8Ulhxb5M>Todb~*sf&2{VG
zNO=uh)$m#w(1Ap8A=XRheO3HjEg;uie#nk#hZv9NEuQ-Efc3gMP?9)V+(E3v_cK+Z
zcn`4=6yJ+elCd=khAs7<B)N?$mYnFEI(Xa!eX=&>(Uh<|AIuWr@KGt`PC*@34dfLG
zKr_&&YnQWA6Ccz}UAj8g&YrKmoOJNDjt8=+|9Ii@LGdBQ#Qe_CZuZN2-F5_oMFb9Q
z!ArLe0!a9uOh&HAA4olDiU<)!UfKf(tWi1!y32G?_wPA5mDhTnNVE)$Odc-f2kzCZ
zooRNCf=u~6$Z<kLRjLI5#J4@&SBEbl_K{=4q?|^zh0|sJl+T?%Q_cCFKfT0hD8s6*
z1B^Z_ANJ(BblkMt+2qU2+5DBF+XszUnE(Tlucct?26_n_ZI2R5?&@s4IREXX@aaLD
zGpNHLbLxQgWaDV-y#C%u#<rU9beK0BO!@lq$HqPXZC#o4Q3z6n7DN5EjF#rdBoBk`
zwQ@^Tr*NbSk%b2Ydn`s0SY^I~_gYXtyOwl?g#8Zxy!Nb~|J5rC_Rp6v-8jhB+}1Xp
zW0dIv18N}%e>01pBhg&%O)V`eE92SvTI~1L><BawNkDwyhI-w?`#4m^<n9S+l1)o2
zBm#T?Sj1{Z2~*^{oOw07A5+;X#ZvG=T(5KzSGSQp$5!L^?VeU>K6}{*%_yWViEC6h
zg~m=#qQa%<?;tA#1qI_q5@Fqa<*ZY+9WJlkS&5jd$Vk{di-r4-`9ye%GD2`A*X1Uq
zFR)iQ8!YOfVKSnTHT9ufv6WJVHMGYq8>_?YcpPias`~^U%4Kpk&LdNrG-7CI=t*Br
z`F53HOnY;pi|k9#;9(Rx?81|TJa!#2(Q&A*MVc`oCo|u6DYv{CnsSL-sXR1q-?`KB
zfb~|0SzhHGK0ZFo?XA)1u>6pa5T3=%w5b5Pi=k@8yP*J|s5stDY6joKcQa(eu2Yc8
zZjO=|9H;qmX@6oD5Z`nEwAKfC3g>L9sa{d%#!n#WMVPeT)W+^{QcWuOTv1^2v%U?e
zcD8KJ+`tV%%S}ELX9IN5QMg;kzVh0~wx^x0vq?{;KZjo{hca0cC`u8R|J<BHRZPK?
zqxQmA;Ek9oPu-C<yx=o~UZ|{9&Z(d-4f~8+UnuYFJkQ?Gt+cADVXuD$XS&}ZPl<cZ
z;`BSk%Mh!dt4Lv|Cw4M95AMx$M&s@GzlD9^q18~;bQ$nhvA~#xUe0}#z{dq~B_#dL
zi2V|FcXy$6k8yINH7Q^z5BP_LPk-|44tOwCu7S|s<s2&3>UA;jj8E?#aydFVwX(X~
zs2oj_I9+JhuQu!$s(^D-Ir5~D9l=IB2})i;(3bo;j8uH{8JcID9ke|X<wCWDX0;ZX
z7=Z*WiQ)TsdoTw4W6xxui!j~EVrP*Hwc)jZ+A38mg`Itu+oeEp3ZRO&=@hJE9@=fB
z8odPmOWLguDlGBV4ag}_4z(Zu=h8xu-UfH+t-VJR%zyc$ye)N#Tt75=RcfUCxk%lp
zQ_WHWR5IjC0AE2FqqV!XF@fj71krhtMW8tCY-bV)to9vG;l$wJV6dQW*bfQ|ZD+m!
z!rth~!jGp<4~9U=Es%`!eJe0)P6A!bvknZx)=(;{#~G^xJ3Bjt=7UB1TS-Z;qN9n&
zw)u@ey(rfI7C*>tJN-G;0t$J<+o}**u|NGX{f13X%%C_{^`pHSFp;M^1K*`icmJFA
znI|9(_6k*~gnjyGhL!dIVeh@8qP*JZQPfXOtWgvZ5UgMY5$R1MB^FRbM5zkW83-c1
z42emkqauP*BPvMm9mX<%g(6Z07>a^`Ql)q1w+|-Yr!niUb^pEh$6780nVI)J?>SG|
z&wlnpuRbX+d*9y>UY|JG{``|(C<>y%-5dQuq=Kej-IZzPkB3-l7$D05Rj5rrXF>~&
zM1>`3Mna|CwbBD7dUBCMTHK=MXUf7ROAyheLg0_wmHx2d!5=!{*kqhep9tB%1#xRT
z^p%+%na=yDoqaDG&R0yLM=qz{n&xI$8&^BnWLr7@eIB!+O9?CCkIx{5BAf{c4#AmM
zf|3I0S!qVD&XFiTa*DMjm|Z}1Z?1bsP-{;%|8kD7O#`l7YC9^;Fb_maeu0Pl-eqjQ
zo)T!YTdKnL7W1L7SVzS4T=q^KM~LE<-#dur|DtmlAB2|d{rWjSX4}s817}l-aeHon
z=s?Cbmwv<YR7Q2;n&VPSdXLM!`)&0t9qLF`=~nn<OwB=C{|TYSxqb&$Wcd=dxo%Ad
zWjD8GW12k}130u--Rcl>zL}^Buxfb682xj#+kQm;bg<<Ws<NQLR=mlfX(NUy9R<Qe
zj)Z4=#nkC4ckISp=<A_=NVo3_&n^uSHk?Y3ogEQ@(E8GC28OT8@0diaArh%5=gLjn
zUAaOZpt3Hw_S;4ZZG1Y?Ar!eunQu0!h52Bi?bfYDbEC<l-<N3RUe@4odat%)978;9
zo-FPvCKf(dC&_dgwbr(wSIM4Ct7#fFo>e?Jmd$s1q`;)oJ#;c<BYKid@xnEVJ$FtR
z`;b=;77ImiDD&7jzWCvZr)Q=Gqok5L=Q9z&%DLCdmV=o(Hj%IIpPmi;X}fn(S3iyQ
z%S5k<yylRwNqM7ug=AMR6oerdimH?2rzh9iFwoRj)S?dcbGs&o)<VVUX2*6Fn+79R
zi%B0wYx_Q1C7of~y4wBIv%&X)Cxb@oMa9JE;zc&+dl8k~dm9T^0=ZF3xPQ$yFM+uX
zl>jEv6hr|o_fNZ>3}8*u_yQ2wv(L6z&rA#s1|^5FL+vyDy>KsjW%0puV$Hk49o%2I
z*KaID-_36%WIA&uFxuZ)bFY5UR?O5?nZISo+7GPsa{DVCP*k9&mh!SM=Wu;wy2_n3
zty#KWQzutLw5)4+VJ6g>j@x{CV%;;&iRO-tgP4XqM!j+KSTP>dp{l8;zf--&i^gX|
z-FVZD`}l(O=lbrA=J!t-h1u0fu31BzY{^P-9p?1R)O3sd(DQAO5zV%?jf`*`3vS;)
z%dzlDe?L-9`++=!gQB8AO)(@*a{lm60yEIsVg4K27|lWQ!}c{5cf)5J(9GM`WJ}{A
zhsK$L^4uUKs!Kk`P=(JX>#_g-<Hdaa(o%VM10L#(4JrQLa{`4XE~m|VPdgmsx;1OA
zZL&Ajxl;AJVnFJJCk=zI^yg^%D)KNbN@zYah3UB*i76hX=-OQ;-r{Kcf~}&@rpcx>
zNQXAv?{X|DfJ-#)ecA4H%WQCBo68EGm%a>&H>ini8=fFhVL>JQ8p#=Ac^_1`ERB=2
zUF8K!HA}HNImO&dvyPD+Lpn2_>sGD8kb+$6S6`eS0R2`NANQwt|I|xgdSa$ecqtSK
z*C$hFdyZM<BOKYbwar96Kl=R`K1)egm$d-XpGB3$Li=Xb(`399BHhv&dO40P$}SP7
zP5MdnWmE>QV1e+NnCRy;tm=tePW*0Yr~wop6)Q>ElMG&Vb6`@k@6DF@H}Bgj_Q%#1
zd*(^Qx`bJur@!LcpEtn^wc*X|@YqAWv&2P3DXGS5Q0LC8bocXHxntbI($W);+lj|*
zB>&hSEJX!OhTyM|9e-u>Y$aoqm!U~3YHZYcc5!(Gb#C%z51v?PVJqaA+8MMW0ab~2
zi)NRc!;B^dqqM+DfNo87(I==w;V%|$(=kr*Q(d*C*}1tRzEiKS$#Ei(ayb46i_-l}
z($=^Xs}k=>GDdJBj=A#%IqSOgrYgU16CW>d_?;xhtjS24uN%V3o#(8oeea4<w3@C|
zuWmyda>K(?%q8#vCEy-Ib9b0|wM{POp0`0h*%x8XKsE=soWvnXw0S;jCwK2U(=O0|
zQ;$>f@+D9`*7sF|w!k;}{8~GLW<N$@zugWO;jKv9b|G)hisPHo^t`&t`8XT_wWKN6
zy0uq$>f=dkFNcEm=W{}*Z@#!WTUV3O(WTxkVHH=*55qg4o_tz<k=VFQ)`-b*TgMXL
zk2bAt<0V*<5$?I{kJI*OO`pF!ZL7(Ph}EpdY#cf&3pS;Sn3(KB<DU;A7AXk(of*n}
zQ2o*ImG&xM$o~r<=Ah<39YQcbP?h%d$k{GVd3RT}34H~!Y6wFsJ(u#$=$=57gN<=~
zOj$*x+?ZBZrOYCe7t7+hoA@TApY1=g;r>p=ANHU2^{dZc$YJTV!^_|r{k{1K->q5a
zQlm;jL*u=U9xSOBt>U!!Z70{-=&ifO=>8+CM4pY<x>MgjtsLwX3H#-a%@VoDuEE?p
z4t<#wEx6z@|4Lh$qzs0V9!*92uJKB2)eo4$r}OiZoDjL$+KG=RD=F7qGVy=g>(Upq
zt>VtIHE{d*=0Q(b*RQ{x^%^yLb=#;faGewrO`i#W{!-oy)fYYpzZ_cRt1dnB7Zd95
z6XwyW0zmol=x*;eS*G|zO0i2;zz2<*y+V@{?Exw)o;^aIyFq^jZ4yvFiQF2lDljJB
zaVs#ib`%*oKh$*wB|be~bXltCcyI-b4%ItJSG+Z<l>!0~_P&};t%l~Mm2Ok_R&8o5
z?aO9~q4|}YB8aA!b+GAWjZqKn8q8ugwU05WfucLF=TR~>F8`#5W|BHNG*+L5hkbVb
z>h8ez9UaAj`L5eA4s<T;YC>HpY$x9aouA!RdvY;$#VWTWIF)IYpBd{imT2uJ(x2NE
zAelVLH}kd(IwL<vhgV|1hl@_^?z!gR?v6~li;hsG_R_HZ#JlLWnPF<<c3Nh${gL)8
zrh8DeR%K;n0OnHHU-;8#-;2pE)<N>I2^Uiupaw00TTbp-vB1)5prE8hI=RsPM;*s^
zizNrBG{jtxUH#Qr_Xv7m+j6`3OL1~;Ru7`>(+6jC>_dI(kwSOOFx&4w&1AM=YP=W5
zTXZ!gL&TW``(n@2TQFL}w-N3d&0bpvCrlzHwZojdH^O9(<A7Frs;f%wQworiM2t~m
z=UQ#|BJXyqb5CEwYy{Q)n89p_VNt`@2-YKYkxJ^3BW&rvv!K@dXtmtm5Bu}q9>&M;
z$PI$}-aJzDFWdrvEr*T+OG_P-*910$;P9?v6SSJD5|X+ILQv$E9j6%ywMFYscI!Ae
zO5lBT2IPQA9F8t8Ml5ez_-w`==MtMVyZnMINqM|Rp?IS2HL4c9$_LYd^i&t9A0^Km
zh?_&S&MT;KuO}X7R*r3WnA=WPJOlTe)0=j@N0bFQZW|_rW`1ipcdYUI)V?fck^^gi
zO0^v6%{2-v(^X$WgOfZz>aL_JKU?#mmB!*v9|w?jl)z63<9ctP<K}#g%{^%T`M`=Z
zoT=;?)~#|CQa!Zp+ODBj)UyMRO9XYLN<luv56E+n9d9x$?3#uR^x|VpDEBl|$D19F
zuh2=@b6sew!PLmdL5Ot%rmAiqWwd&36lw8B_i$Z9R~FN%JWmipan5z_5Ij*ZaKk#7
zt#NtW+Ynh&^GN7Y4MY4t`?V)v+J(0NvGN~vfY&nMjc6q_TxDiFPi1I^ict(gDOpD?
zU4Us?%+4Y{RFO&2Opd5R1V+yS8%~RLX}F^u1gg3oXC$3%NI;W^L!g0-F_(6*z(ym@
zuXAS%>h(a}!Js1roTKnrf5}emD(D$xQfaee(wUv}XZZMo({>dNP>IT_*i6IzgPgb%
zRKm4JpFaID^suZhwsh)bXQ)6@pZ;ujR$0J<nHlnY(*4B^OSFj*#$j$<qaHISf(jdZ
z!1NR&+lL&tOe(<C(w@<>pj)@<%rQmMr@Np94h0<<gfk`n!M5fW(!&DGA$r~z0X8Do
zylNPs*duu&uX5$P*GE<#O(2&^@;RLNUg+oOuTzgvEq65DHpi~&*b$_8a6;>+(+;1s
z@(y=BKtpTh9L7ZZ;BGH9b2D;=UcL%-RRP3UbNAK#=?r6vn^TKzu4Y4vi~QsZ$)2X3
zz!n$%8f=k?4k2pQ`+)*y)`oJWMrqmy1Q7QtY-1li^1{@>o%<4J6Rz~s?d$4+vWu-R
zr*J{VtO?X`23uT2kj-dhHey6d=<vYEK&w1Pp5CzIgU}syeo?T;^}(^*)*}J=EH4mm
z6B)AH=s!1@t<{VX{V*&J_z}~cObwWrZEg7O>F?*K(O!NKlq->LSWRo;fefT;2Y>o5
z>eFAm$iI)T$L;vX>)7_yomJdt+dF#Y>G!QiS6n7!M1(zzIOt7X9Sn>N3v`^pplx16
zY3fRDG2umOJp&k#wyiw`O0317-Ype>KI+RIEc-e>BjX^kC2~_A+A}j}$C%=CUDUb!
ziXT!&=c7l+HWrG_nEC9>^1Q~ICoe3KfPF#&*QD?PBoZo3_Dt)#Ea0lybU2v6ssZ?Q
zAN;pmk7UjI3uGiW9r|WG&<wM%kcT=EQexpT59bf)X<h-B<;(4$XIVH}x3LfGK=+Yo
zK14dhYZ>NfkY{IngrM5h5aISjt<j2baUbda30=$lzO0RIMYDbFjHEl&s?yPCneubO
zJ1`11%tlY&U5sX0pK`G(d*G}W1;Qmr%1p@YxTM5Uh+`l{iBMWzVzC0s{x-d-tuGtr
zCfZLD6eVkHBL>kCYtOlqPbN*RB1WI)UWF8$ZZi5CyHfJ(G$y$EW7Mz|p7I*;*09_z
ztL$dhYMQxc=5-&C<I+v2yaZ2&Jt$eUTBc^F?MQ=3dOH#sKTO3)E)*~<jaY+<NP|}?
zbY@kn&^jF=Vxk(D7*CA5%y3z2-JIK}C)?V)<Y~f#Im-oe_V-9I^rW}=%M5vjxesHg
zdIeYG6rymtSxopEL|_&c(3AD#w#tzkEX;<cx<X}ycFD}-^1Hp^*>VGuCH2xQ)?Bu2
zn|qOQqP|VB26>ouT&!P~_G_EG?GM&<>R5jxGBPZbcHzmd6a5a#rGWbxb<qF(0a=9R
z6#y4{v|&`PhUo)YWZ+GOgrOy}q<d%G@aSwxH_?u-Fq7#DOGibiq;@(2>noBfhu+yG
zE@MeKZE47I4b!q(ZAu3il1i{DCFwOux=hofb^jT0lYDGl-rBS56Z=0)=C9K_LKj9A
zci(C~P^x#b;pu72YwGhQ^9&8gdMnuj<a<+&gcgsIh{9_W+pySk%~HlP1V)a7#Z-Eg
zGIbBk5O*(6Qo&Gn&dksr#*!_H3VTtJS|vA;f-`-z7vhmoOTx+g8%3J?>{=#tDrI3A
zC$!#C*Q{X;%d@y)X)djvkcZ-&A45O#_Glzd&^|q9GxH|r9+vS+pFF@+?R>0|yJ|wa
zcYCv+l-Uvu1J<5VUGe<86mQRSsRl;CmX4~OJ$t*VuFxf$QzqwK-D?s)q>|tJja@Zv
z{oIB%Nbw6eC5K+0OSy2^Czpo7qUHu~^%Us)vYWU76qqHNNT3(Qsmsp?p=z>Pg~`OH
zt806z9~Ry|7kSX^a+}u9-R6x^B;ylbCHX!Dv3N8BRw}2auILs>B-Os9i5Qmnk{{Ro
z!Ai^(pw0I64Yu<|hGw=d-VjDp8&H>Z9(m4nY!b({^m_r{r1f*z#(l{D#o1e3i1U51
zV}m%;K~KFmyemA|jV1l@zPkDEti+Afn%He3MM8B(k#1wE2|`*KJ6B0wI+OT`=II$A
zHzl!3=4S;|WYY9#!au+D@O6epF0xGrk*BOWnQFsQcOjdCMXTzmh5gLi+E#bYS$ncQ
z#^7oc9pvja&ShgS<_uTl*GZl|dels5AJgTYWT=$gu@m7_KR$J?mq&)~Aywz|twB^}
z+k9v_EXuVH5IHws9$76Lc8)sqB4%w5B4!`GLT9%J4E0l|egL2TsO5BrkoD0O_FkSL
zveUx}3~hbe&N46g*^iZ86r8I;lqhy&t>k=7JKSXu6K;PZA*T8xr?{1CojV4%UvUL0
z!0RuR@W_%yX0uz+U{s|Mhuy-Ej-}}>kux)8l@E5Q>v<x_s+6)q4ms1UnY|+`9Kp&;
z`({XnA5CCQw+fX)$R%{NN$a%7dj@T8l<o{CJ<};pd(}7qRPyC_m6qS(DR_<E*ru$2
z^1)iBJ(E&d?>-%FKAZkZFkifZ2a%X~(Qr7s;oMBgO7{~n)ixE94M*lksS2(AtM6X2
zrdVN0d?Y;+*f#qH-781K2jUQ&rqZ(@92wtGG<?@!ptm~4q0J__VCa~^;|uh=9<Q68
z@k9AOZOJQ@ke?}u`-_DtKf(iq4-feANN(-1u37Io1DVzmi)59`*bN*U#w)dwj)R=c
z-V=!oc1a>@Zg#qKxbmd`Cj0s=J;Epo*t|I!(|J(ubdCYWb|Y@g$|?M_Xp6^F*5B^z
zufN4sp-6MvLL<(|zmQi|vg3Zjlfz`e4I*&>gnArXr&~gjN1ThsGAU~@uC8Mc_gLF7
z-X+f(Nccs1)TSqqmXtnw$7JsIxk`?ltfH)DdnSEK+q!TQ(d|wjpnHkeFBN;up*`X$
zJNBHHp4IOE;-X?hM81&oSi@1TQH(V_SU>5|TfZe$?&4EXyRlHY+0hVb2P>Z(<w6&M
zrMFw$#tZGn5HSsYh^Cr-8pa%B2kfsrJ0F}^Irl-IP(!-sJA_!*j76@&+&65eVH~MN
z>Xnag?E2pw6>D`J_H#~daG&mD?+FxO$pVro^e>z%p^xhwK74rH`t_o(=8qc`&QHkn
z!{8^|&X5x&H@Q8Vt@-fPo2^xted65}8F|{I6|No=vuspp>E&XJM9kqkd)y}Pp-o^%
zs+?tg#b}W=hUXoX39x)pmWwe+DG+d!S0tJ|yks+&gb9mr2<n7XhoF>mJi$6sBa$Om
z{yo>io&U@WFSM&&SmwdeGwkhI-YC{mU;bQ8c~j6i#Kq%jf4qaj;qK0g@L<jeQ3LuX
zL|yT;w4RLzF8yTS1|^f8UTx@Hptq#{ZAz@Bo>OMUSVOw}$polerQ&Qo_DE#!NiGy~
z3wLA94g_<L=n&@vS99Tgm$;SOCnOB}1Pea384p^HeyG}3Avc}CDK`@(F-Q-LMlZzK
zX`FZVX_YWXT^;Id=9)EL@51bAnMg<X^Vuw3taj@9<StDOjUc;O_o{^Rd<vL)7&?2l
zHBoz<K811wqrqWngaLD0#Ej}1F5$LTLU**QD#B?DF1$+q)b(pZ*vTKGG4?|O{Z81^
zN-nMQ=g*@&8*|jXr*PajX*h(WH|VVqi3q^V9P66My-dqM9@pt)YGFo25jJTmIz~P~
zn_r2Ei)};FU}`^~kKl-r(HvgW`hxG=`P?Ve5I|DHODWmS_FkhpSGzmQL;0>QNpxA|
zGTI#^u^MK-K>tJ~{ckQnh0}|%iVBYF=YsLEMm1vFuS_DJ;V9kYU>RNt9$6`(6<!hJ
zf}r6XEdNgl*0~+G2dk9%vY*QusCcvnFPbZw$o|HP`dtI}thie`UB;MNNQw4q*1^`@
zAxuZ=6G~Z90^#rAOzQyN7f;S(Z~5cAxEgKQr9Z88`G+^ZF3w%t4M+R))rD;8kIq0s
zKeob9Zg!-a|Bg?DY~TPzaDfuSF~akJ^4Q@DBW&B_E6$jkhEnPtHS`HU$HohK-s1eK
z1*vCcwGY+&@!NK>n%PDeJ@%d*J03`mLZs~~ff(-2>b0gCUZYQy@+G^loKdCYo^izh
zi}rWdSnFCRE3z3*mKQHx#H2H6=kfkcOL<bLCqjPKzz7FP!MqPQS1zlK3qX)2)==n-
zYWHQSB(yoSOG3;l0MJBNfxGry%Yi{Cn99e@;px9v%O-Ipe1V64v2=3kc*V+QmK<sg
z0J;=bweHbBo=_PoE+5l63HZ<8brgl+qywcK_8uGyt$|6@bms;dhlaeD<eN|@o(;5f
zw{o8C5=J!W$*#(&JK(lk`@#q0_*x@!H;#XIp|Ab-zgk27YZx=mz$9|S_ho3TDYY{z
zNDcK8HdL*2kDxG1u$>qdO-NwqiW_u?f^^g|P>{W+XW33Iq$Ml!<x$ZMFTE8cs`A~X
zu8Pndbr7o>4x18KY(_E1Luk7nsQRL@B}q4bqLER=0SR9(LYT04{w|y5=BmVYfsqs{
zJ~7F`!6EisLfg7oC{<5KCrq7%%6FD;K<%$(m9-d0tM1VPVi8wI82^bJF~rIo&#v*E
zNp{D`F@KWqqqeyZpn^2%#Zro-wYA;k&({RMsO)176ej6z@l@8F-`d7{9>ki$sSy@G
zSZ8(F#V1Z3gc&p(2<OgY?E@$u(~b_=^dcAA8?WRvAcdS$Nr|=G;$$cPY|nwGyN8E{
z?qQOFnqCBx>jj=6e4n8uZI;m^(@!#VkqS<3xS&zFO3N*;bKRvyO&We=6AAb>?z{<R
zidK@-`l`VPZ+5n%yIozy#J@b9)|Yo4Q1;`h-Pz6yZjXM0sL}ERFF8I886iAmn%=g7
zj3FiziAJ}8ZWT6VvOJx63+XdR8M9IWci=xfJ#)qyd)hH^p2)Qt@u;6W#|b$f&zm<{
zd?9Dm)b5OmGc?gqcvWZo*Tu`%_Vh8k#$2I-o2uB<ibUTODQ2P;gv>PE{gAkxGz4M8
z2E2e`j|H<mwb|$j9Q4s|;)zy{OjDEf!8MhC%)u<|?R8yccbNCPs&3(6us@TZ9{I=)
zBlAvb+B&Pj*iXu2Wg<2+2rdG=)k(Tm<3&fVH5F}2UwqJb`2p2DTF+^iZFm#_3S3u;
zE`RSnleXjdZR0|JojNlGIv%Tr$pq;wB9K5%Ush|vc;*h-)p)_NW5>k33$N(@i+9(O
z1L@PJt|xWJ;2dw?wjnOl$0O7dOF`$crUSyU30tmwcr6DM#k2s?pNhL~!;hCPudI17
znsfWY+{|QEvOdk1%+h2uh-31d#dVGsWE20oyrdL^32)TPIev-?5$ns$qzau&+3Y;>
zA;PBV&ujkPlfxTaA25ahZ|ta(wlCW^Vg)dtvSvI1DK9jkZ>bG19pXt4C^c;bw878W
z3e+KzMJopjhPOXnwAvSd&^C-W<dSu<%B}dhf&?{iQrAT<B<$ciXnIO!y7#^vFVM1E
zlT#`&VCi-A^oAbKX~o2#(B`JS+F5&THmwF&7;_=h^3N2Drz)YL01I1PtUH(VQT3-A
z8JDH{aR)~etW%3QBuAl#=TI^5P>5EENkE1S-Eq@5(^;sq(x=X9cW|&dwm5Z_tdhRe
z>OlUxEM%bAccV4swG(DKZ;3vup^>TPmV9aXf_4AQs#0uF*w3&W-fi$U+^0QSBv1VL
z&x;0hc!ZPhHR!Ye{o=Bl5jL#wjGP;p;in~8J~48ede3pI`oZxoKjZJIQy+U#lP&Xz
z+~lC+@N<Jbb0y`qtrLV>4QaEhEJrMWyG$SJa&63D08&y0i1W0u`*hC$GzMja%S_>u
zW?n90!xe+L!Vg_9jd+MQ5eYKV&|23(1=MA>rt&$mPxh<TV}JzlKz@;$u3N8AdmRet
zYe-oV_;0j@1&~J$WnQOCVV7SXP3^d?%|FJpNR|~(V|#3O?HGnr92{)W1^|{wL-Cq@
zx@)bo6!wL&xH$51pTz7IspvUB>lHrWbKI*a!qg=ITe@qRnAg;>m+>PEPQw@t@MG8*
z4I!-c>+xgb{mlm0FMj9Kjg9)G5mZT1lM~LRZZ(WFg|rz2xs`VZnWs&QQRimp&Vq;k
zKz+p}%)ar_dFF<FT0Etj#{0s4m17WWs=S|hPdMTGsUD_7PbRezSS)gd|62L^f26D-
z&uGTa^5xJ6=A+HVd<>(jB_F3_I@I<XIi=@iAr0WKBky}sZt_e;JC93m_S!`mFa-n2
z@AHf+T;)?SlDZW2X2%l|Gvf(vG}dgY+NqSmf+9I21N13C&|I6OG6HVie3Re?9>%Xr
zWP{J_uHF1ZX5V2{^$?eL{!EoSk-%p|e>aFcGCtiJI3#Mesy;I_Gg_lB0$CBG8)K7i
z-n?0FnO?q@QIccRo<7Dc@$;b-NR<?u;+=*&1^%$}+vK9uM5Q(_@F2m+)yPU5g?rYm
zMVaQuZ}0W`SgoI|p^Xf=$!%QL1~DXEe{Sd}Oh?#kn1JcglrxpJn5VE2@C@b!-x&=#
zE||MNwaB2@+jn;7uD6NE_=zdNK#IyVIfwlIyyFJir$1d#p9IWe0B`;>mJju7)Ed~k
zS2#^SSzQ!4(XwaH9*Z|W=S&qcxu^qWSu8(3c|pOPw@(w==g-{l8cH()AqUJhDJkgK
z6dT!~vW$mq(`F}G$$&*>zxpHgpQmGQDy^=;;qBuEHuV>;8Oz91XWC`eFsnCtdhBD&
zi%Jc_U!E~^Z0*9Q$poM~qV?%=7{MFJ`JcSY9dUj`E=DTfZT|XsvvF@&;PF`L&p!PP
zrH?gg2dh3dZ>!tZYVvkqgLwWYvIU6^VrRlG`P(hgcT;nB*Fy<l*PY?IEJ`oHaDqg4
z9#k#$-^BgCk;GLXUT9@og;$9IS9C<>gZ+pfY}`6j9LBYprg-q6WI+7!qF_G3^UIY(
z?P;&vZ;R3iT9%5+yW<2yJ?YQ$CuIgN%}kWazx-|$6NHVP6<d5fC(5neH$D5KFHEf!
zB^nSjMQo>LF<bpZgYByjdFo+<>3fPkYZs*uWQ=6nPz2sShH@;oR$1X)L~Zo98BnUO
z*~saP;s$?3`5$=$MJ@-%k^l$SJ9X)%jX7Z(w_lT=Ijkfb{KHEf#*enI5l!Swv@LJ<
z-jj69k`J|;IyZ}oFv*RXmJ6&&y$9v<fVHK$fO)wOZWr4%L2(0&;f7Q*nw{}D$EK?o
z*&hEG{G)D|`;?g%1@K&pCF4hc8Ot{amgTWXLcy_5>z2eEDoFat`=5`ugl+`k*nZ<E
zs#DIuG?Uvvwe8g!xJ4=ia0B6-AA-w41X(ZLmtm+h`*e9}DMnx37!5~I!U;Bt1My(d
z6cDvXr_TC%I==gT!?ti$ld?+GtD-C1QCvO=8t%4KO2^Bf!9?p#%*_OGy2f*p$6uDx
zc#u#0ANwPNbMhfu{ke4~&huUsoZ2f@bmp#Yq`y#5Nz`(A3w!cf!;-Lwb0=e}39<Ne
zaw=e{fb-0>#mje?LE4!RIaXeFtCW}Dky->>SppK!MnoR58e}zLBeF5l#XQR*<srXh
zR2OP|uedrTY&)mVA8A}A-TQi?Sjeg(md~Lnb?};e)4M;d7h>If8G4}+YVb`yF8#TC
zh##yUcps=NKuXjzW7*jzPFaDK7n^d1)0f;e;*Q5@9fag_32J(UXA2Qy0*DPL7Gqjg
z8}vUx+2DrgOm}CfwRctY$+Fl098349YFq9OS7=|~nVj3T(^I6fj8`=e81Ig{`2^8&
z-@y%pg-p`DjibPLw(~l^ElQZhuu1Fk*nPTrdk5=L;1f`l?yK>gQW0<dAzEouT@)kz
z*(xSuPpoh#0cYVd0mfW;^C4%j#B1Z|mLp3_Z7Ws0Nz^o!Kk_D$^2VhL<XEvumz1c@
z5zgI%zO%_F)j{#TKcU@3ogo7|qX&#gy`9v<v1M*MzQ1v;9c4b{)*|iN9&v!oPj>Dr
zpK<Sd{ihr398sUir@I5=N%VS06%`d7{Pc_(H|`dX9(YhGOlq?04SbM)%q6b^{GFbj
zg^bqFGV6Q{M(&Y;&GTstU?VTo-@O0AEiu||j=*b~tV`3z-kzA)?r1QZS~}Mqz4+^G
z<iQb*QUP}mBHJE@?Ka*$-f6m0#l24`TeEh1e;A?uxg-Acnn+EB);k?l_Kk5Q;2k@?
zO6tR7`qVW(cTQ+9j&fNHw(TG>{09tJS3-5Q?{0kzI>dxcyBjS8=(U>qxnn$5g`*6+
zB`b_YfSiCD;0Zm`SEfC+@g_6FkwPUfq|wkTCJ2bsvkP~9@ErK-Fo<ZQP?5wAgs3<u
z1k6~$=l-d2EYxbs=>(E`gVuM?R(r!^_<@?N0PKj=VH&fo2hLmnNI=fHDTcC0H_1f7
zfwBb!&PNz%3(0be&uUZFw@%en3151Cou2CL<I@fZOT|*V$knM$iVw-#iO4zgTfxD~
z3iSA7RUdG%)KJ$325&GkVN;c;-I=a?=FB>j{!Wq*jszhD4c?cXAWeTHNkSOnV<jfu
z-q=VXNGXmwU9u~T;7s0Uc5f<l9xdYvsr!LI%Y!-uwx~CcPizCQFG=2N%^GN>c)_#n
z9BZ--pr-<_%Uz<qy!^$xYXRPH^K{6&Zxa%_=Q7UgwZ+K76_XJLJ3~bdbVGOD7`|41
zuqe`@B^Q-30V43dmU#6Ai<Vfvc00LD)@S16&b|yYA!W0V-9N>!*cB%GtRsH_zIi@*
zyagxbdcFOJKd;dbFWtmB+*$4e&U?M<aJk`dx%f#}WhI6ARfH7?9chs?d-Fb_Rm@_H
zwtml9`kM!@kht&141kSDZsW%7TtSV)Wm%W_OZSJ=lT6b2+A{v!cK_B=$*xOsmD0T_
zZg@A_!EBl=cXbSn7eJHGldDThF~)}*$n#G;7Vwa0bt%;A8U!cp(r>a|DDDFs<5quI
zaJ}9nJ~3@6FM@&JoFktR{2#%>F-zvfYklmr^D!r>%}bYmz0=wD{Q*ge_Jhe=8|Un7
zR!mvEl9>e*rvwMd&g69)5$X}`Os|yVMy?d1CbW02FHmUtZ8Z;|a4Y4Yx~ka%sa6Js
zDYkVhR50`Oy3$=Iy+aOk{7x{3wM>kYi$(?3i_-A)dz$$GO+LP2O!VCueYtT`6DkSd
z+YoA9<YYiYAzv8~C_59}+qylkP1S={V|ogd^+#R^MACsekp%AZrg^+zx^%(P-pJ|!
z)iB2+V-$;)CVEP`C@sD74)gM>edd|XuERpzE6!=LZ?8KY5xregUv`TUgb76pQV>z5
zj@D_L)BtG#Bf@B<nl>LhzfRz&j=$Vgti;rZ=z9+z8u#hlDaXM>@D#K%kE6&OXIbss
zxty`)n|)kGy>an383Ra>e?UO3P-oYOLIwR(_TuFnbinfGlWkc*SJSe9VAU?$uhSa!
zg!o5-#`<#EoilI&z|tnA>THid@}4oPNvycV>Dfy05<hX(vc_bD+g_~)5LA--Sy*xh
zxC1_bohwIMMD(3HY7-8>(zi!&Sn|C<*!7%;0PNE3spo^S6%#7Y2=co0CU0Ee@tKKM
z$MzWbmgtAZ^XUQGYXgg<<tN{>^NIcA!DsA*r;M81DAGAXcSc%zjd!Zr*^i*JMigm;
zh6l`nwiZ?;4`ZA8!YS3ppM;V>292<n4;9H`65RYQbQ40U(BjCm%U}v7pfu;d)L0g!
z^c{8Szwe(LiRmIF(89wsr`b_)I%u*HnX^bMb(3xQs54%qLg_q?vH~l+xG5RurDVX}
z!KHAz8C^0xvnPznUdnm*M`*XqLwvs7A1u=Q;y{zmd%}3CNok{V_cWVy*HF>ilDs1e
z66;d%Yfqg0f{#6DLop(L-09Y>TVUe8;&SsZ380x?9lHsblF+#C-M^oqnBaw+GSaEj
zdJrgPol6;{z#r+AQV~=Mo7b!%@N<|y!UUU-59EC?4!zEz&!5Xqp$wL@uqzIRoD_eJ
zE9YDbOTi)5TuW27Zx)q&{xgEzm0W3B!O{LwTT?N%O=u$J9~}o#is<%zy`nFFK+bCv
zw1@2oL+dQc@EIk*h1N3vSjm)(wjZr!)JTUV7s2-N0wCf6bNjGrX>d?bF}i<(ZP`w$
z@7c9Wci>d!BX!nBxOdlEw>vqy=MM~a$hvsVV5bXp!+JX=OT_;$>JxFFQ6#(rWvTEa
zhPB4ovn7c1N>I<x?6N@(`Z#QfP%>lGm)Gs`%w%Q2`zw~%5rgeQ-YCgfs*U&F)^=Zy
zsWJh8uc`+LRRh7q%Ja{7#p!sD4d}``Qg}of6a#aIsgH);O{HR&_PGWT!X=4<Lx%^^
zYN9#w>6%HcQ<<OmoD7u5sT~LPfZ!m`tarqoWAw}joXE*)sT`l;l%Koj2y<(z_sW7W
z0ai)8jS4yN!07jI(XkdMRHp!`%H0~Cb0AN~B*H1Hg@HbRUnM?7-9Y1=d{2{R3zd47
z+=|RteY+Y^2FDZdH+567YRV<~19jAuLLdx~x@^ICOWDdI6WG}ZwH~->0)er2H-}p8
z^V?{v)FxZl6>)px-DO`NoW~E3qiQBnjiYahh|z!<9WaNaGeTxEm+p*;#0q$pv-?nl
zoSWubheAZ~x!lV}by4xCXD7~9LOVHWTrwy)xD=0(4><U?^NZ|Y_1YRt1d6v@<KZ9`
z@jaUSOW6hCL!)o6OF4tSM$_>DRFAxImSjN|NXNK?lPhFi+K2PGjoA2d+WcGqvdQ_Y
zH&GfvUzoeH>u_i(p<%X#iFb~=1-*R9CD{8jLb&;AO<lu4UJri>u8woH%%@Xi&VrLA
z!ic8JuM$&xl3d>Ns2;TMy+hh5im@L_f@HJl(sH4KHt%>sgDz|2T{DP2s#2UpDMWf7
zwJQ5JBqG6&hQj}yj!FH9>Zy3^*XPABe=A#}Go;<1rC{=W!1)YQH67Q%2R4Jn!N#)V
z_urNc4ZZ)l)^gYhks%z|CQgin*%kA)0{pw;OorYD6#6tV#E!YLh$C&WccMjjQqSZu
zErA_7?ieOX(m+|%@ZC6Ec&@<lXkF{>UAz2-E4VjcDsgL%OfuN5@)J*}#S?=YjND4^
zgS$9dYi3iU*6RDQI>toS3b};cTpj#Mdx)VwdQglNQEshsoA9x{ODVfQUbR8jZB#UM
zyk)xN8Kyh-3}Xxq+8>cQ`XlImG(0)CyTvKjytfdOh%MSNohi|_7X@Vp%6|Q<>8zx;
z?d0=k-kle=tWUCez9qWtVW`zS31V)d)P<NPAB1TB?f%najV54`N1Pvjl;_?q-6|=J
zjxi>h6qeilvGQT{M^Z%#bLn@odA#5mVNRJ|pSCL(W$@RP`bo>b%g;1h$d=t;9ExEA
zCzWQ=#-QrD;UA{vknL>-DmNKs9xCdPrdL^5UI9<Ri^;Iw$Svvcb8W!U{IF+S!WSIn
z4h4`?Pi4&_PEL#l{bmpVYzY!tcJyai-#EApQ7mNzR|W-4E&;8~m-_j}tvG2{e{V?~
zaO(R^&lrG4rx)>hn7Pm?^(;}VPCCH?z=K{@wlxjmIvJV1zs1#735Ilhk7Oi?&T$F5
z5F)MDwyfGlN)jNP`{SV$qx^Jf<p*X6$vRib&!i9<C!sQSMOJ#DE+&e~V)H0(I)H5K
z+k86mmvwNTgE%R4@bT7QoZde7B*2hs!MDkT*1tET$H|(`ppKk9VPVl-XbTk0%i7iO
zT;i-XY2Gp@e(4-gi}+`vWxV84O?+HjJN&w?32T@794|qnVqu2=B-SRZ0#d2+_6;4}
zxUtp`Rnaa$wn_n#t+l4j+LuMlIz=}}BNx~Y-rkw`+n{Oz^*fiG+jNRH-An;7-sMuw
zYUy52;xbpS{o2B4-G6X=L+F3%70>{$62f+fjqRs8T$AI+2amic;>}lVF&B?7eN6U4
z)S`CkTo+BG8@Ek1Tlrig3~kH=cox^y(1k&x8wKlD-S2vXIFq~@#1;McIYNd3b0O>0
z*PF#O75(%N_q49V#T=qw@vs`+^ej?dDjF{o-uUO0HEWdl+%7daw$thE*b%K;lV(Y^
z0C~oxngEHmPtXX}4UBk&hUE~6N<>zMH~z`k+uDKZoh*gxLUm21g+m}d={$i=yn(@8
zq9lVnhDb^Ywg{z-Etm&(Q*^Ts3@NeOO}Vz(^h^Q@6E-RGq<9S~In*T^4MX4a*w<g2
z&gqJfHx7G7Sm4*>Wta=UPU)f)wezl|9`#T;6K~(wsDF`MLXxh_{3R5C@?rzto#OP^
zi$C1~aaKK2Fa3a+6cvSC1RSzU(6-7IeR#s@&tjcvViOY*WX2jTDz!#i3SF=rspwL0
zdmT%I>?j{~s`^M3sKZ*Lz-dbyifj$;SI=etqY=-v;pNM-<OzefgGKnsp4cWJf!41%
z(VT5hP=V|m3)VBfes8kTqus#+RzMk=YcyLxwLlPHK)O~Y3LO$)m!RSDd<fp;%dd=c
z^8#F(eSkYk^rp<y&2^EvG2#b^B_mWbFmN6f>#<Py-w)*Ae0&|EP6_amxckJX$C`Jq
zk{!A3I|ZY%23b%ll#svrGOZfIuSbZjOfl<j%*;QEzJ4A|MZ&J`<wY0gPrW(q{$vs1
zAp07}NG1fV3q3}X#JHi^BT(#aPeo<&ERF9Jyjv{o{Har?dIn%NADwx*_3MuR3(*M0
z3<B9gcP{Wq`JVk>B*9cpvTe4^8&dhlHO^n~LDWyay7JH8y#5cG)xQ1tA@+Zl98)>O
zw)xxNW;?jx|Mi=PrkvSr^pE3?caHl0#oR9{p=^ih@5?VVKk@CQ9o*6&pJIl)4;@kV
zSa;!@i!nWxM!itY&-R1Z#oF4_|Lk$a2kiRd1LFQ4KOp7qU2}3Q{_&;q)7WauMwkeG
zNOBxq_^o6H|7l%a^86GY^Fw6CvJH&PfBT#TcjO^aQcu@7Gr{?fkH9W^xOsRfo<V5N
zncX|qeEa`g=Z%aM@1Neqz93Wrg)!{t(64t3c}G))&pIcEh=8V&on4UE-=EWE8}ifN
zT!6oS#^#}fJ-8l>2mXcl<QcT>#jE_w16a6G{xKKo$`GB8i-QW|GWKux+sfFqG^iu)
zR{75lXb}HJXy?9t!bJ4q>#x@ym!{eD(MES}4|=6-29N#QJ4NL<8qMEm0)&iWAE4S!
zEXKd+$FLb0#Yd;5y-{Gx1ReT7f}Sqd`t=?B-`+vp5k*BO{I~g5j}^E$1<U|c)7T;T
z?IL$W(&)gk<0z}Yz$x*1^YP5BTkDoD_-3I!c;I%FjvlqSU%e}E!S=Om-(3ni_TU~y
zPwn3QQstWs!dCO=y?Zi1m9_<~om+ZI6a1LG`_+$j?wYJzst7xA;@g{ZJ$k;O`&?mO
zjRITGE$d|-I^^z(i}$E}b1iJHhp~|FsD~>4GE9e(FljZ~ZF&`w_e%%9egOEc{t|K^
z1v9gwSmVG2?-PLbjY7=nUXG(ihLtWS={flI*E;^MeF$FXp@I#ik$_y2Jmw{*tg(`#
zr!_P-?$JD})Km96vHXZM4($5o6D>1vAnp|u=zQW!IgEAXzK>PLn`}cEfwc5qO3Kb<
z%d|qjeH>Z^-Q96e{=|eXZ>Y}l|EK-}K6DAWT7ZLKvv0*afKcR#3syVzdN=NSn>-66
zHov)qyP@+IRt2T@*rX&c^0tp2aZD{eNY2tWx94Y+G&CN(_~vD79;`s?e<VTkzZ5n2
z??N~H|E|z@7w7)lH)k_l`0rwo-~YQR<o|thwr_Voo5%m}mt|eZ!l*|Ci3C2%4xkF>
zo^$cy#Avh>5tdRxfebrYw}X$sItQf+xEa`RyKyF?(JO?k14w(>e?%9u+=&@76`aZ6
z^54DsHhwGH52gnbwKou06qCEhs*2oPSSO*Z&UPsMW^nKZfV<vj6SWi-)DpAs{=~GN
zJ`GD%3_Ufor*&7U^7EgqIoCWdUHXYtpFi*^;pMc=%)oEIr9AykVT||X5C2)(mKB>B
zo3mTXB-QFkK=fENCDSz1f7z;;ok`x&iHeDJb><Weg_?zSTXsKK^~YweLkj}G`{mR0
zGwaDUk;B^;q-{=S*mdL$6;!&_xmDOkbh$s9T}5u<5aoqwH9z&L6<geC;K|YGWT=9e
zOE__0mK)GgW=M)_i1oUCk6q^@o+C@(@)7dN`L9D7r{RLuLiL{@lL)=1snm_K8ffQN
za2<}kCqBCgzZNAXigMiDgJx-ib|^YDW?=?i015ntI$lL*WSr@u{5Zd|^&Br&{?BoW
zsw_BkAwJWrS_)xyphRkZY%HwcvaL@qS>Zh|FmEEFKCobhhB1JAuY!eqfDQD-{&k7+
zUtXe}8sz#6a&vQUMAD8NG`|&?mVm}KSj-dM#1UmJM^umOCvq(dW8KwGeS#w_%+nk5
znIX^P6yNhNu1Vu4uE{6Ef*}YZ&r3S7%~4U0@6TUQevnn#I1ye(zu;(`(EDq6wa1i_
z)&E>q?6PHS3qv2MMJth}A=8>zn>&t#rn+w3ht2rqD7~NV_9AO4PQCOZW)LH4tr=Z{
z^P8i_VN_E5e<#~gb}`#8$6l3Fc*CXaeDUR%isT%9Kb}vY{<w+!UX65XL~kLHn0g;r
zoa#Ip*Ei(aK`w}Gjyk&Ui?=%Cw?yUc!A&vT9^Qm{EoHw~IyWDyb9?XkwMg@%$i>G7
z<36`;y=PYa5YrxR+*q?u>tFzBzz4Kfs2d(XzfOnFkM8>NeK+9}mvwYx`U7na^4bRu
zQPIrM@o>_AT;oEHAgV$8w6mHxUzL}Wsjnzj4cgoI56y3_7u`p`TsEzZl*aeguU8(D
zB4>%PLS0EQ30<g+c>%@mvGq7`8x0dvD9QR^;IBcboWLYGq#iFDcx}JfuC=df79Wzz
z%`I2yC(piq1>Ph8i|3aNk~<%Mp4~8fV}6^*7W93!P^)o63VvLo-m2kJR<4xGq_}*j
z!`0=ULyYRCXgpJ9lhgCn^T(#BZ^xHQ!AD+6N=oEOC4c_l*a8*XU6`FlHUg!eXMVG=
zWtELx=l)-C78kJ4<B&HpQpIQ`Kk*{HlncM8lJ~Da5!!i%OVpePkqFb+Uw8iOT<EcU
zl}qmU^H-GfF1GJ(-M}y;pqt$K8`iB;xOnkT|IaTcT#!>Bve<!G^uDvRZnFLM{4Liz
zGtIwTcXw=8qxW3{DTCv`{`%_y)|!oYbB}UD`o|OG*0;Xv@+kiErN@<Ig?xGGkqg1Z
zKxcrzlHX;qBC%Ye&v~JTa@WwTW~TtGu&zmf#{6|hnNyB`dELf4*}iif-v7MJw=R)s
z`S&{4B5v9nXkpfzr*g@-uCONI^Pa0^p8fKmmk-K+j~Lt({PBaBJlk%;UO;X*PW3Yv
zTv0&*;1=Ns+x2sPJ`HiDSzoTWxj$B1K>;`tWv2N(In^F<*=7|+)jB71x6Gf!Q*PbP
zUoMd(mZ%D41hl|BDPizClKp+A5ZxDkG;!0{o3*km&ztzGe7;lX+K#6GsZ*ayU&r<z
zWWF5SRPp)ciJG#!>(X#gK%M#5lIrW0e_?t=k1seB+m)8itpui&c#+r>vZPT{;J8y}
z3UM@Vgg2+u1swhSQN}gJUw+i^I=0`O1;xc3+6O}C1Pt*)wm3Z$obK?HJ<Pq+xb^d`
ziF6x$d23F~*nX6SeqFU64NVE%<jOtF&ysyJu3{^asrdPmI%_h&`J^PXY8Fd=t@RY2
zFIoRs_s~w`?x(_^Pe)By-d9T=vC!jGfT&fI#DN0`psIyKwQ@H~i8zy<o|r7?S>ngd
zXiWX<wF!B*zSw2v*XCbqUSrxmuz2xeDe~$l4$HgIkILO%%^$^@g2u8h)-dx3*0A*Q
z<;z#dDLb?eyQ*ozh0<yIdBx53biZ^!pMRT6%rcf8zs+WTSWT^}q}4)1dE4jp8ty*!
z<$7%*>vcOQs1WPJGMqO|q9)ZmDwKZhzm}@j_}kwP56>JNCuW;m(WxV1<;CRs%|6>f
z(d4A}e~{0f|MF=3lWlWN*V01|mC5&qDDmYyexDCQ-_1y}((_*)Q>854-<<bu+jc~N
z{GcYSv8?K^^%I;VNBHwsEEOB@?{EJ1w+B}g+vfj$``>@nuq|f$?`Qn?r)*J6aA5!U
z?SKCzdT7C+|9<nof5a}pf%)IJfB);y%2WR;+-~l%(Btpl`Qq<Wi~jGW|9^7Tqbdk_
zF0n5k%*Cpx!;9u?7E!mKSAOyE+1N%8-xg%+4n-h<S+Q1)9f+k<O{?y4Nk@R|Q3Bq@
zPhPB{U<T1V)ZL%ug5Z=WJ4%ea9#A@a_ACm&pr{ma34~v{eCzh@+h#7HYLq^|p?u%6
zJt4gU%|O(PK4UcW8W*GZfY2iYQ`+GFK%Vo-c67m&)KD54&Q}$>1YBnBMPP%uuj+=S
zBj7JZqn+BwfJC=)ZuVE6#BSIf8u_B4f^@X=7hKcxu0F}C;^>nW5fO17?aplI0j*yU
zlsV2FJ9^?0^&7LAw?N2Ix(bLl5i}qH8L99NcL{l-tSVt#8KFzb?Zpe|V1OFFef&#m
zyT993>HLf9*17T?zwOF}^1@m0aJ;#{%I~wT!>bjFxJ|vP0>L!n6{<cP;37}%k~yo3
zFm`Q#35vgJY}cLNK_Nw$6jS_?)6>%pS+nB-s8Z}yl^MK$fFgaxG;+fIMLDHNaoVct
zo+44L^XcvF^-Ber6=Fn74eL`14bXEf2v70Y-WbiU=#6CMG>M_Ab4tg)!AR8p1Sl*=
zawm7!M^IGV`L}Ho87w>iKGD7wDh7WTcGqmkcASNKRz&&$GK@0RBqtK*qSq2aQhXBE
z224l?A4uy=y*ol|2#}2v;ygQ+yEP6H302#`n7Yl0cJNEa#%CQ{hC62k&^7Drh+<{a
z^Dj40%0`%v?jTf%vY)=FLH`ltc3K1EXD+@pwx*&z(Hm6JQh(_&uLxNeC3K(Q${r2I
z>+8l0SDUuTh@)z=)@{0f9Y{%#<j7ZyKfAAesl0?Rl9MZ^WIuEfaXhcV!m-Bq#&I|L
z8s%GebmsIC>w!usP-4f>9q6=?N1VXCgP>8PzVp+w)y#VfJxcayE2$>Bj}K=>M80_W
z(i`ncrRdUMyIOYS6dB8tl-t?p2r8_&g)|{Zfkj>N%TiuWyl;?RGRjXj#p^YRL@2L%
zOwl@YCaR&a*fo8u8I=ZTnra)M!#LEg1>%B!C`9eWUfP5^)pAAqXN&2Vi*xFGSm@E0
zlU<RTkL=Nc(SmCOC&l$x0%~dedxFsx-R}v-FzH=`x(>~vL@;90nblL0m_sQXad0p{
zj$~|oY3RGpv1!7&eQeJ!B$Rx*y^zpbLBDgwRw>yddT9P$$8JZOwG=p^Y_zf}*EZ(Z
z1|c5O0su;i+3=+xjFMizbkji@P?l;*o7y>)i67Kiv=+IcDwC1;vUnwr#D0Kk94LDy
z8^nBl7kBd5Vo(0DlKbo<`$bDuc=lR~p8k{H6$|J!C`6k{YaE{qrpbicH-OodFM*db
z@1UBM{DxBMyD|D%)Dp|&$vZfQCE(&|T+GJ|BuKuojN-jnlsJ?hL5n+1`puUy#SrC1
zICUm#3|*7BY-<bssE10%52?;ydR7nbklz>8aATNK?1(~1Sy`FH<a_liTs0n$ItE61
z^v*eym?3qdSX(rJ!?Jm9ri*r;j`FG13?@rE*x>52M2Py{114w_4tAV19(|JXwxIqh
zqkHj<-~b9>C+=P`dEnDYf%@v{K14We(De{pvXbkJRetN-*gH_HH@y+m$DA^7@<d<`
zbq65`Q9SZ7`TqMsv06m1IWS<&HD9gaFMD;_YBqpHQDU44nouAFQwJC}r^>N4H{|yo
zknopxKQq$95JHV;Bj~!;XjV&68Y3*3(yOcc*Q1x-x3~8XVHAnL=Tz1KeCg450wM&_
z*seiVtq>*P+<)N^n*Wr$4vWUePu>}DvsN&W5zju~i=LG#8kI#<=%SIvdi7yacRS=n
zd~7Qu1#BABPtNWFuFX={#qxoJZ9CW<pIi)0Ek44jMHg@Br+3d_kS;>!wN+(W**Yyf
zy&Zj65=&OpOWHWWiWs0d<#>K8yXwT@0+j2%XO?@TPAmvpN2l9WLTC--BJQTI*JBkD
zIp-~~-uBIQ47!m+i{!2fS#i6Cov1EzV$!!iMrv;QuC~`lsL1nZV1HcZEDi0OgjJqL
zqGx6*HWYselv<-r;WJQrTjkXg2DMD7)#itE%PI>X6k!&u5;=EFK>=)t9l|zkbfO2v
z&V)g^#$Qq?Jy1YcC5?TAqv9`Na0wEBIVW6UjD?+s-p{KsQ}U0@d^}0@#_`*31<Iq4
zzf^auBlwQ$w`V_Hi+RvI4&jK9b2CC)@7=$oi~4G?66r~}eq`0r^AQ;5PDrt+HReA0
zGSu6=lHB+^@FDyY5^9u*hLDa+Unc3AQZzO;zGDO<G#Je{yOVVMNKxmz)r#C4NT!Tg
zWQzyqrft>v|2P|rp7CN7;CZlVeK8t7v2Hm(vRhGTz_2?xB^nI26{9|H3)SWzyG|`T
zbg&_P+DH;~<WrZK#wI3;<NdNAarRfmX~gf`IU&QbZ|Z)XKqWbY<V^})#{J=uK%jTW
z{*g|#@6%cxs*=>~v0%}?laX?R(9I}8^YVIljO6Od>%_XFA;7RXZ<K@&q`^C`uTY&4
z!M$b;0UE%9PzV;(C4;n}O)^l70{1$gceQD>u&}UsQ#M+w2~D?ODQ!g+Krs-r5Dc&#
zPRR$+LvrJkiS~3EYM>TZ23lnC*9Lv}Nh1<5pyBaIr6QY$6fyqCedWR825LBsHe7b~
z+bj9z!YOS{=C%nDNZ<1z4FicC!4}8%a&m>{nL=FRRy?>SA9TMJ-xalJ1LMgT-IcTo
zo%r%itLsKW+-xs@pBWU8U{RN(%MGn3`;h_GWx|v<a>D3mWc($lW4)rIo2Vdz>59IF
zwvlS;nRhwUAae%Dj`MJ2x5^1a!6Ae$h6=Ny!Gg!QxE)zSf`UnBwv_k?=1H`;IjFX!
zf$pjQb(Fso8QG!2{b(1XPe7IpbFmL%<qF9$e>nsZo8K-kXDgcQ<R&Te<?-e$3UdNH
z`ImGgc^g1DdV4mK0j=AOP+9N-d;I=hZ4iS&)G~zh9nBNsF%okVYBqq#Vlt$`HH3Qg
z9U}uUw0O|py%)-ah2w2FQ~{oza&A*}@PxQs`b764uY8%Ioo=jxf%ligoI3A#1(sRo
zePlqbq}0kaJTNfO(F%_2QQ3bOi1N^u^(PuSU~NES@`Bx00JTm1w$S;s?N)hauIQS=
z+*q5g`_k>N2i&tygeKGGr26hNyg^`-_tl?idwC#LC14zi6rNB!x@p>4G+Q#42NogW
zil{WTfV0X2As1CbynaC4wiWGtZE&?vNtv+&>qXp#yS555jVI^D*sgCma(bDuRej19
zkk+hV5{iYv@b>g1Qa$&8G#fRR-w_cYhTu+ptXgR?VvFFka)|$x{Pw-L=JfEEkM8<t
z-a;?X2kn85O>Kw{$oV)hxRlp%bBSO6?yXxP;_;SKynh3t+3{PmuGr8dRHoZ<L1lBM
zmDL<EA;){rG<aF%yNqg8GPLgjeK|1U#~$JA3{08#0rz1CIEf<Ay1QF%jOY&+PV;Jo
z>cV=C{Y`Z^O0DbmKvvat1-IB<Y}VWL4*}zXJDi%+dDmk1-o}k<;2(T}!V9tIcgMvW
z4!wUt$o&(w$w_|io?Wvp2tZXZ+N4s?Yj(pL8`f-KJ1o7RLnI06O)8|lDrsat+T3Jy
zx>kfiE`gW^`j2@8pNdQcyY|e3exEqG<nDs;mm&sq&z$!+kKc0`(DQOjhg%_YJ5Ssh
zGKFfqd+46q-?60>eyoaCHkjMK6%vHG@+g<FFJ}`od$XN1ETYRNHg#~kGxlTZ)UKGY
zwb*zB__o0TDhUzpQifMKJ(dr#*&Gn(+rV^5NDXVm_FpgFGSNer{sw|ZFjG(*t4As!
zv{hVO+_=(R`av^jlH3fv>G*wl9NJR62^GRFb|bbbo!bJ3MC=+K1kY{frOu?%jTSBK
z*LfJ*^8Cg&^%m*S&g<?I&#FQ*2M|P*ELh6(1ERuRuZWd-c8w|k?Ze-1>1f_WG_7GC
zsqZ?dSQaWSL==6}ETIb}=lG?gkK#eFRNrD`Vp1G+_yxNnbvU$DL4kg2R{*~tTKrua
zy+YQsp15BA;zh$m;P!3XqECdv0xlD1Ia~7n#ds-_iZ`ly&|Yx@Ve=!lD6=Z7Zxxia
zvTwCNfAPW#DuMSCm=IpNWe>dC+tb>+p%9Ho;Ly43;D~vJ-+%?%+2Ukk-&-`@zw6cT
zutRK0Wl^qGgHhuS6+OQR;~z($-mQfOy;Lv7dt0|kUHR|>JHKy0OvIGBg2Kp$7TJ!O
zyW-YG#S8<GpieaD!AU~5(t$QjfqbqUe*JpAe&|b>XuM6O4caUf(1=)_RasHt4+8%|
zJ;!&G6AYR$I6i&xg^>=e>YKwsh2P9}RN?R$xA723TP3uIS?vmBv0Ng@dl=#fdhb9h
zP>4mHZIOGRj}BHl0~<(B+`|FcMPX*VNWNjB@Mbn*gqKov&*-2<-QEWj@Sku^V@v^P
z8J$qw3%MFdD5Ot7E|munJ10p6(=Bm;yap<fP}Sos?~%C%B95@lEZCs}S@JN0?d9UF
z(0SyF$hr=g627S|F21A~@%%b+W8(RIJ>9nWkcoEXVlb9@A@=-pV;dDma2m>->g}zp
z2yO?}y!59Q<cQsJ2aU;s=<XSpO_=aN*ngMe_H9MGX0BgZc~aut#IkWGM9a!33aQs2
zth|WUgJJEFqKUcj0BC#8ZGv4SeT?*l4y?XN;@a;YbtpkFcMp7QQFpysr-2<W@NCg6
z=U@ZNtk7B{{h%)t7&vlULn4SO?9e}r#+IM-UjkgKf>7_;cE|&?oTHmV_{fU_Ewh;n
zW}^S#F{9d&bA=S9JxO1QCUd)q{Ir=t3lOetIHB`#U4PgWleSb1JJmj<@V>j$A8zMh
zO<S}0FhGOwQA<9(YbA<+0{$9V{2Njqv_I+QN!PTKXIzm>+kH7!^dnPorFbS{hM4y|
z-awhNC)*TN^2zmP!LuVV^2fa%OdnZ_0uuMI?t00$9*c-Q+9i)E205#FzdT69{XMoH
zfD(Xen5oX`(`#81rQ(Z!BSRCgfJfS<h%*kCiiEo>-IH9f_8QOSpB^-lCJj(%iI7f9
z+$^Rh?I(dXc5czrAMJ7Q*13&T?W#(-_{_Y=hh(M+=S9Rhoa3IOZHPnt;mj7wpO52i
zAys1MKjFD(l|<C(zSUBuj-VOZ_vZCnFK;|~ZPlhWl9w>Eq|Y#OA?Wvlr~%*7etton
zc-r&|DG}0nEfgV)B8nG!wF!+}{m~c+29^23PxFhJRD=<xvcWVu$1<N%`r!<`20`YM
z=y02PzKs^(#cmycrs@}!fiA3}IHaOpQs#2!9~T5tp@VDPk|6iItjw3B1Vqd+w6GG*
z#U<F@YW;Io2({^s*k^Dn3p%W*BOmzqOS&p%9gy}qrw4#NJMM?DEwkyV=TXvr2^~-K
zJ6k<6?euEx1~!o=+@Ei20JNetp~wt@HA#iSK>jNVS-@6v6WRD{`ULv0Yf4)6U2V+o
z4m_W($sK-_nCcAhs9>slkJ<7*Hzq-j(9xup=w<`PIUPG~_h_@cw6rw(27akGiM*Tp
zFlgiIx;g|`rEfBC1T@tpV9YGV-wDy9k={VsD?zWmBA9hZ7ENRGpr!Z{1~?zIIS>3`
zZ7Jg;IX%c|sC-{-m{Tf1BC=d!!Y&^(a79NEH&q{j3Q3XiZme0uo|;J#X$M7In$;&E
zDUxri_%SB-0vx0}5Tu!*U`<VJeIouGs#|6a{U|Sl{%5A`UIIE-i{8!XLNGzHgJUNf
zSy>RV!laIBltAJl&otv6iJMKV**>K*3zcb~goFg=LEn$C_`W<&bmPQyJndp|%60k2
zpxeryl^FZF9-ij<InF2qcHmk*IgknlFnGz<w0&|6q-N5Xkdj83$|cEV3DWk=;vUd4
z9n*c-c<t*wm-&d#wDVP#!bPtQ*8Ta(;`Kc0m*2exncE`0GTCi<3~hX?DPt~kG+1+9
z);KkrG3BIDTF8JqA@8UJDS@nsx!kGlc%s)|6o%)ULfU%adDjLbC({j`k=vE3qN=L8
z0ztHttz4$$S^0KfK2V4#;uhg>?V3zJLkXPVHYm3>CD<XWjJIpb&24|u$dzvG-}qA5
z%BS+~m4R0%s02AZwA7NJs%sBjTPik+xNt{FU`ZON%SySGchC!->j>Nsq<0}7M8{M6
zzf71scHhTPVqJ@-9Gl*ZYJaa+{3j!HI!B2^&FTRO6?9+$LG5fS-8+$2ikg#RV;y}e
zfS(9};vI6C3D&(biZj3|?<eGEy5)Yn)Q9QFbd;9gaM({JBaB{(!e0L1D3)F0p%4tl
z^&CAjvya(R39)5E$S3ok{^$--5MNN5!7|&&ZVls8?)u#LAuFVLq+p<EIw^y)Veh#g
zprCS#sPm$$gX$H8#)2$Tj74x5^>TU=o+U_|=K?S{QvC<<w!tMYEs&YL6h8cz6AhtO
z*Dkjq3XIOq;VF2><Cejwq1&H!RG?$pLkK64`7}g@l3RZqGJ&h4EfoxyV4Q|P6!}D$
zgfKdNiX3N0N7x@DWg^{c_56|CL{2%kn04&<@p<t|bY~1T)z@6#a+OTh4k}W9x#wl-
z$6To8TC+2OKrMZ!OQn0hHz1X22uKA`#%5h1pZ~DA1&ylfqz7d7BeNd>-Bj8TxuqAA
zJouOEwkP^wFpZ0~I@;etFGuze^cYDTMCKH8rzb{}tw$EGWQ+R4Z<Dl`@Eo*k6%QXq
zX%C%(XVKBmpM~xw+qLZ)qIwNH*j=nK$DhmZiVh-%k9q%RQDG|)4>ao4SudFhz2U5;
z_I;qdqn356=l`(x)_+y6+ZHhDHnz&fA{3NupaKda(xoCQD4mi50@4lA#ug+51EfKu
zTRIk@l9Ea)EeJ?U_u?I2&$;LBbMJZYAMk!&f7n|^SZjTs=b6u(V~jawVU9y)(h(}9
z_Ml>xl>+YB=ba&}X-f_r#zM%PvZtaYi#Nz!sr>GI);*Fw2KxGOYtzrr;F?bD`x3jC
z9*X;?!;u@;5WL?6aT)7FrrV8PBum4pf5XNvRuBQjIQrVgIm<Vu1ULf2AUz$-Y?l%c
zUtODRyy0U%(v(vt{Q|gPTs8@{NbV13+(&_SnG2}Nskbv&+@2f%$_k^O{eWq_(N>bv
z_4^mKQP@Vh*i3dY5eNz#8O(9Fm=Ti|%5wpr5^l<-&O+KB>h)HL%=f1H6s+mbG@JFk
zyQKF@%WZw$&~IvearkOuL@}%jTt8<Sr2lA1w8l=zP@1a1zPN`2ML4}zn!C=1=C4kg
zPd>nqAi^jlq^Sha22f}w9k)q({*O1_Xes@j03Xm6xP_SaAk|gX_nu@Dc2A9Zy$i7s
zRpLN%L~|LH2vHak4Zhci*Hz1#M6T@PxLR}zM~^^QKEs~zi(cS+;_W~#{j#}ad#MJm
z1?*Auc1oL!`pZj+lX{Vz3vjri@~AB;LCU%>(t|LieE-M;Lix2n(XqVp%k2Hhao;DR
zRO_0A{?D>AP{Zyk_i|VMSeiIKIdC&S0t~soN#GjNM9>5caB8rRHx<#ZTUK*UCvFN@
z#}mFB*NOK<Kfu%LY_0R{JyPd#<iw#v)@C+3&L|!RX*g~oiFh#;k46Z7m;@31uV4ro
z{V+%6r28M;oUhn4LcWj@NRv5-bGR0J++e8w9$mYA<+cP)2dLDXSYH%vti)2n?d}_a
zev~gDzrkn&+NBrUC}bYFQ*B7;taTPdJ$V8HG`<WpUOSzrOg1W#yJf4FQUZs2^y-Qd
z4Ye7yY>%Ri+s$AWmltcgF)>9}d@fH96IOs8XDz!?w9^SJJcMDF+8l;n5Zg-BV=~z8
zjEsEK)9uN|b(+-c>dG_EZM)&G^@2CT=Lu08)f7#F0O^=O60@LmxC*y_fZbQDaSV_G
zQc_cA19A!9!vd8+H8HHk>IS+ttaT^57GZXMDsFuX|KF3ci|2t}O>_{r7oBv-j$6=v
z;dx1$xB-)F^PD}%HJV?(MEJ$FYuI}O`wH;fATBBNK*_|uG;^DIx$*P{+p=Zw=9`i5
zJwS<agqR*)Zo9HLr4_sW2@p9tJg)U;26Gx9%`A(~&(FWP2B^|+wvkbuwS5Bp9Ns;}
ztL69_2HO2f)v4+I%=<x4O%u&=f_RY3(|ArxAEn7W(?=R`bMIoKQ`4&wvKtS|-d~hn
zFcd<3E$^lY;;ALNgv%p0)&d<DQ<%@5eG1S}<cP!f=jW$kna3d|G@qS4hN>^MZVYX-
zEE(M(woX(M;uffFZhEGp%!s=goH;#DkOzcwqTwPS?h4dO-9!Ye$^4pSP?aG2QH%)|
zn0=;`1(qF#@yHxao4dwn%Nt!6X8o7)EtM<KoE@4kg@)$=R2!yk9E6L@)u)H3Mcu~_
z0VumkY-7DN2i#+TS4H->ODbDf_zBrb`@ogJ)q5ooD4yqHGpdx}d%e;TYZv?N?7l>q
zhV!N;6)wVae5gDZ=7$a_yC#YD^8n9AfFldt_NCbsV%%q+?Vz|g-vRz68uzqk?PL*W
z&h;e?dnVe=L`jEKu5D$x<#EOeP$nHjAmoQruRMD#$|#u!`ZpvFk<3z&eIMf}0R%wD
z(f{@y`a5dN;RJI4Mz~JI;G4>HH3#GbN3xV-*uEbhOCt6fO!}x%@~clWvIb)sKydqE
z{up)&UV{dbn(a-%&No-DnQhxm_iUdNHda62p6>p2F7qBi0!X_zmdZ1LHf`^)Fa}1!
zzwgdpbW3OIP`&m3T?fUk=xFCWc|utFdQJlzBgiM?d1rvvL}lq&n^sC*A^fQOGhsAU
zh0;}lsp>86E`k@@ADDV8>m=BaSNSObI21dGCOI`7XI$Wh-nL>_0BrA{#=eQan%)Ux
zvVE9BB?5%BqkNDsNA#pVaG)Fp5}K2C*Zhuz(`~$`a+T4m61M1j{p)ZLtj|pnVQe&3
zabikx9V2?Kt6iLf&94{aR>ve6sm{#uciT#{K;2Hbg`cd1F+u(Lt&L68^rW?!$gAQX
z3$uskktu>-;gst~LX%=MO)8w};{E<i6ontnSqbKy8HfRnEW%{o<qnkCUjusFaD$DL
zrd&B(R#*pfNq~&@4WPH*Kw|v$BllA@<X=U}`w}F()z>}I)EMiM3!f2FsH&>`BZ*;$
zIj)+Dwo|r~U4+L#z?TIyPJ04PF4u#P$x}QHuM4X`CcF<pbRw>7QwZT34ZCL8zDN$;
zt2K<&OX-}Ag3)b_@oYY=wYApB#MAeA`zc<NeT(w>WF^qt!5|?gyN;<5lnky<HM6`b
zALa1rr(f5ozSfp2Equ#=DeK<!DGuYdIwT<*H&#6)j+HQbxdAW=@EjcCmNrpSRSj7v
z&f#mKE`p(ti_RL_jeSrHo|{<8&0PKq`;#c-HOCxm{=R3v&_HuxlGh+On^Jxm%JNk2
zQxW%$S%wp)o)Zg|zK7+LhqJI^OqJg7X~020W8a;ePSy+7xve%D7g`xeTEl~u@QDw7
zRvf#sFcC`UHd~)Z=oSaloPe|@WEd+!Ux#fNYZwSeG`91c@*-ZS0dIZF6<HmhEr0kM
zf=No|0Ej1foi$v6EcV63D4PMljSNj8a})vbgKQh{U=5&~>Mhl(v0X>KDc6AossIKb
zwhx}edp$dgG2R4$zS*G4pPQcB<Ou=iJRasoP%2+SvrvYl5Koh2W$DVOmQwyC%<%Pe
z1iQ<ZPaxyGuC~KUp6I0meQCfv4NQ|58dg)@z<a!4sTu<e4ZT+lzh>%rPEQY*6Mh%I
zyV%zv2}65*^E~c`<fO@BbXdCTkO27JBQMjkbX6fM#}JZRdag*h+FfL~P$V2(oygPD
zSu=NARqL=NYMJt-*Owl>0m`4_D4Zjtqy=pkF~(v7D%QX%{AYjQ{HS8i;~tDJ+CP8<
zz@cEQK8%kOrl2ai?I~}jZ=3plWtF3yd7g6?`115A=BcndK;<(~m7UKZ2>yu@z^H|-
zRiO$BBFFk`*-LTaP%~Ve>T$t1nKU1yY$s`EQhcB$t^lkOM#cE|U6BB-%sV^dmV|+Q
z1B4%T$H#c02!O(ji4DAanbEwn9o){!m#P>W(=ED*^+HLJyF#bwFc@GJ7%%V&yq>b5
zR!rzQGG-EGeXwno^hx^z!=79V_J@OGYs_Bk`0#iaIR35EA5VGjbE9D=p8y#Vw(>sW
zmM!B13_T=$us?cP)QLMKk*6^PnXd}T&a}Yv)tTiB91+mpN{l0%-!O3k7yinj8xOSn
zjUAD`!__9xlZpD5<O_bKZ$CIq;H-XyEry1J*)OVWdN?9^$<-CkAo~YGIhi-8+=Apr
zaz}RBJCn|778+E;<+-S0eXh~1;W{Y=K@5iNYbP-3V;IDebU(7Vr}2^G8yHKX7{KDL
z(mbrFxYz?99NKUfWG<|>3^+q_u=tVHb49G<)dKZr^p3z)`S|#7#pDk(WRJzJZrO`$
z7kPJrs!)8#kz{ri8Ov`)0KAwg1?<LE^wyt+hX<&9Pk{pl2A64lTS2OriqrJ@-dpaf
zaq7ff%hjf>Af@~966iOU@3lu=q2Do&d*iL*>e=*9Lrt-fiuq(*ZM4Kq3Yi9mJP5L)
zmAWxhW6xWpC+Lx;UEcF|4b^?CJ0qKKJGDRs`vXjHe<lWFaS#w?_E;_sFGmmRZK4kt
z2ynVmL!x<a_`U%+hb6YG5D5+N08FORQdK>4BarQEUOf~aD#u;Wpch}h1OQRyTOpxm
zfrCTLSqhl|O{DTxfoKwcHplqsmKu34fg+q{W9u0mFvs!HSp#Y&{dkN#rj_0vI$Vzn
zn8hUP?&l8@=2K~;lNFC?$<lZ3-0}BxBc1NRXw~N`Kc~Ud+;DbPoOfw^BUWoVQ~=%2
zqw<Hr*c7sInQ3yv#3e<jf+RKw6*&~?wHl={F)<%pzqG(ZiXQ2yg9L}ShTXvfQ03rT
z*cN)-Hv9)Xm*RGmAyqD^aIpnuSVd$JD%W-83DGUy7NHZ_eMFGAfp@?Med3n5mAH|D
z%Z?2z1}tihwK;eaRtD9yY+&go!6r(QOqyZ@^6rKbr4=St^|p8LwJxX>pI^O&IH2=>
zC8-5X%;ig9)>w1Mh{TKpxR;}qUgNXf7+G$CYg)JS_go|NIbz7GK?T~Yn-*%Z738c$
z_U_%X{g0ahX=y$Ww%ALNQZm~oLY?e2ewA+I>T<-wy};V;GQi~ll}h8zh|*yUM&;T5
z_tXFEj65wxXEZ2qk%>&AY=E_6GudBx?k;%L96KrElJ{ZPSTT%k(<-nURGKKo<lYb5
zin2Co=bI#bq<9h+I<bKA$E(n9>8hO%Kv%KW6&@|gcLc<z9wR+fDRp&uJO+e6etyV7
z9!71RPG+XDd3i>yqf0-cTR!O2hw}IVd@^x%`S5$ysWi9Y@Rv13V6U_vS9IlG0j`x7
zJbV?v`~CqGgtoDHkbq}bObs9qnYB%)0Zk(><PFP}<{Ri&f+pLycP|Xw9s3JWyY?iN
zu&}ZD>iY88d8geVI95M5XF;~&xh7SS^rWIi)$F^^>9o-84+&)+C0q+9GH0wriHAzk
zBrNH@mD>GrT9x$~a_mgSa~4Gl`*jf;lUi0F8|AVpW;sOFHWXBxIZ$+hE5NUd#srjG
z2~Z|{F2DZAw3<%<R5BwUCQ%PDHxC|MnIFqjtdj4UHHIUzTFwNK`6J*Rh9Q|2<}WDM
zg>bQ&c484)su^$p8!luTK*Z<~{Me*d6GyD7k78v;ygouQ6DK#uW7uRvDky;qgp?2A
zLn=3>Tva}LR<<W*4v+sV`D1;3>WcvaHX5b%sH>~4OIaEd)zpmG{#j{h!rU#CPGlmx
znVVdKPW;$2AZvXCH60Uw)eOY2X_nH)Ceti73FYr^pgRiaxeEM#{{XC3WOEp1x!ToV
z(h(Am<Hs=S(49%M@#D*>-cc9in`5XQ)6kk59jbAT3y3=$e?NS|yoAv%2h&6}aiF-!
zH67F5N+IKM7)FP!=gEyI&Is6`t)W(BogR?Bl#g=mPYrLH`mu6{mU#}6^PTbtr$272
za^fdL>=yq6DF7f=7h<%7CjyU>5eW?)(yQZ1b*p^gc(+Joyu6a;sO$*x9Mc;TK*{KL
za1T-+|2LV<3fm2wflwstN@}tZU0q#tK(z@~1?UI_Vo4vkWGB8@Z_*|eR1!ASAoyd-
zVdN_Rtq?q(;Vy^PY=YR>do89M1aVx@xo<<NA|*%{Q6Gy*6yeFE78#@!>O^=J^2z<M
zz9{X>nwEczV3^CH)A~eAJ~>Fp!hTU+JOK2|CtN^RGcUS8Gl8-@S#!<+B~c2hu*}RF
z*ZF#sE6@W0rAxJ-$3?@O0VqTz$H*3If~$4_#Ml$f;u_6p48r3e1_9mexRCSY1BfF+
zz7a6)2CW3)m4*47nsmtboroC00oy#n4k7#Q=VOCCYq_YNnMzi>MaQsWo`l5$lBP)i
zdvG@vOrf9{eaqRv8{LuX0+C1sZb{=5O>d+L;pO+_dQXhBr@Mvo1r`eG2l}n)GpK2}
zbRr4yzXu?;AM*vhrU$Cb7q}bw$Lj8a{tH=OC)JJN;qYMUc$EM2I@m~9JoN<h3=alw
zTmUD@=vfO*(t#}f`k4oRUpk84&)aT#TYON!&LqdotuAQRc(ABR(nKocbjS&Ic5|#3
zqic|0luNsYheG}&grQ?~4hYI&<@b;^kCjg&9X-QQ0_a^ifAWaaX^MO<#IpTBI?ae>
zOC!h=Xs%xFYY*kM)X`akK<B#WFU>jUSfld$^pX`84p_WLP^Ssp`^n}xjcu(k#&L>z
zb3JPD)yW%d7l_fdinW%+$#$Jj9wXr6U%1k6g9b(gU9H3={WABSPM%r!=$eCKTUWu<
zsmj&4uNiV<(jga^VRm$?b`1_}Y6ws+0G)Mz_PuY-T?f*BiYA>~DV>i1A<Z<5qJH8=
zxQZUB$756Zx{>_WY_<+{Y>c;DK&j9g2Euv9mFR59igd!+HtZM#{S#F;MoBMm983iq
zpljAHfUHI~Av3bx0K#`7bKJ!3(Z3lCG;yqM`!dPkx}@znjX7awz%Ba)^fUmor8}#d
zech9w%yO(Wt%pv~dK+U=F`(xdeBnytG#23}@vyp~p~o!EvQXzHGGgU_YDt>YoaS3g
zQ#gkSu8pbEgHYYgBLzE*6TrOR2~byUF)jBmYc(OKg`1v!hXqc;(~q1zrl+q@m{#>^
zX9rA{x>@-!y2%HtT)ldg;Ce9wa(jIC2KfGd%tpM~)ke50!1IuKnn>Q)zER272>B99
z4-C}0by5i#43gAeq*3TdBVm;b`B3n_Qm6_BUO)PS#l9PeEH_694zrQa5NzJgn?VKg
z8BQ<fr_D>JjvqsplMVueT2ATscnZqWsjK?>SA&-z5X8hq)>`!qpfy796Xevvoi+{K
zN~}pTw1BolMY&3ai;9G|EeI?_k;siz@<G0tC;m&ggW>JDOYjH!Ek0USxrk(DzL4*I
zc}j%np9$!Y0^i(^yFkj*;Le@$g9d8}N?wZe$$^KrpL#l*MjmXnoa7sRwJKC>Kh<M9
zBse+~q#>NS0+ro4lnm6QsR-2|POt`W(q|`7Az~)g<4z;IIT&&28t!@tuW`Z-N#P{7
z^-xN7r@&YW=fJ~V<aoJZ*&aqEC~ub8F8n=*h(UkBTa6KjG|>UW#0D_Lb5QCpaxS4*
zg!_YhKS2*7M6jY_Xq7OHM>eWxWd?6APeiS9&n)1_im-3al0{XUnS#QD2u)_z?U{u5
z3fS&RHYZqpHECv{rajsqv{+O=h~<2$VSiZ8pdkarH(^sLclSJGYnUij2Nc+;Da{E)
zLltnRX8$GRvE0cNw;k5kpeQ5c$<m%gbqaIMxA%~i>~AN{)Ue9!bjnx;#6`@7c9Hn(
zwO@)?81{1^P2_^%h#RC-RJER8Fce^4#9`$sfT*vQ#-A+dZ(ar%pn&ZhcLrX%75YN*
z#;XO>q~3M5mV#of|Iz{wIQhP*_H=VdhmH`s#`5`XR6R`4HV2mL5%Q1)Ye#%(0K?7_
z-*zJ=WVNoY^llWNX%Jw~xn2o|l2K&!YvcZQ2WXOYz#BY&`BL7X(b$;K@l4-3yq5q`
z2@tV4O~6ve>Qa!+R^$%}hk!9k`J_Vx3_H(Av$kAlw11YX*Fp1RuC(dhOeJe*wD8kb
z)|y0@m64|M&G$W?(!pMFau4W0hknPGC%bROH)Q2jjStRSyVPE5%f7+BE{^#xI{lfL
zI6#>AP@|l*B*aD8oy4>kU`33z#lAqhwIm445&g13Di?mP_HMY|3_i~U7sl8R*7?W{
znu!%{*SPcdU3C38k%_+K&?Sp3ObVRyGTK;OGT;e#CUyPt6S{p8JA@QQif`<{vUQrJ
zFIpviD@n6LbFx@7R%H*w7BUbYi9d&S?x@X<qXFZ>Za;PPII|2-9DTPsPiq}F!N+MG
z5@CLXM>4N-A_T*lOVZ{mXrnbI3A{NXePCc9TG(Zh#ec0nLa6G3(6M8eS(Vn9+}wt@
zmU0=je8P1!b2uoGS5GgPT?e<tCbma>fN~WvE1IXfJ^C8e(}S})M_q7;VQ#|A#I}L@
zDA8~Q%>qf#3WiL2KYiMYs{Br&IXc)LD>V>bt`!>s4)hqe+MVl+9R1cpYd^~ru0EbI
zy<-TCp8FiWP;JCz_YFecMs-bs5tNXU;*MEeUN*!JiSsUIGQ@DyxCg%>bB;l+J?Wmr
zgHB1-*tocm$yL0Kl`0Xk_I1E0rE$`cW{y%45?;i-gkz0ksLuW*bw`X5et93cdX2%L
z$BlqRwO#i0XH}Mph=_2XL)sG%<V@`jAzMhCaxzUa>`@Pv?1wAB`p>c}t?2HWE5gSJ
zmOwM`>nHc_<tGEgjavnQ;^(Yo4jo3^2sP_f=F_JWWGY#g!>{ElR*n|bCl-XrTiV;V
z13ys6OS3*_@8%`~uh=UY85vA0k?l@(5o&zBKC{o6Dgcxrr_v8xb#ZY)4LKFUq3iBW
z<#q#D!SmA6NKAT*{#Mr8gz9UqigDIzH`yL`q0l>AW9vPtd{Qbb0bhOL;j!GiH(4R^
z1ptcVA3yE}E($r!oS^#eR;GV#Ka2O_$0#f~M_Ll24Ofr{2B2Lv-T1JG>t(F5GIp`H
z7P{vo8$Z_7`FnVH99?(YSdApFPq_)WmO)07@;SP++McZGIKo5-r)az@-m;%RFNXwI
z{_^FAD0vR-+b4H=SFLvkq-i&sk))=dRpVym;!?CD5lUn)zx3fR8<0B~!jm#?*lx1x
z)^@5RpWxA{m!nF3=n#vRR`0&x4ZO-HOtL@4$jCUnt)p85s)$b@Idkq!N21j^6+>O4
z!4@Ur8O2TAKS3mB*lfd%k?pWCZ7HxeD086k7Ax~8jYZNow4+ib>hjj+MaHd*;As;9
zPZb=oUl_lIW6N5lE4<<Sm!|XdR#8W1XARuOvd!_0pKzPm!o3KqFA8bA3|4(4M=3=m
zs;=$^k9zSmL`FXl-#Ehza#ZI5o&UhkZ33vy(0+bbj70^YbGb8m7I+Daj=wZLZL4wQ
zWl&JUqwQ3hv&A%Lg4jvjW(iu(E-vU`uAPUYnK5LVzHr?ojUn7#Nc97-t*JAkNC$K4
zMDUMo7rtmCjm>dc9b8!KdoQ|^@@z6TR!w(zx1N?Z9)^Mi)>rIK-@ENMAI05hN|247
zbtxuVU2q+7bT3vP-;jpB$TiAGd1h4qa5C*3DSS{vj4|QCBRArOx$+H8g9ZS6@is$s
z2bY(YP9Hn=VUT25Obssf&p~I-hHI}<_>Er!s7rYF?qc&go-RHXHKSJhg?9#0#KA<R
zP`LXLzw=V3BL+y`e8g2qA{l>red!Rd#p`|h_St-|mJJtjQbLO@i&ja|v17-qiWc#l
zYRdkXNeBgn)$Q0F6kTUPp&>H4HM<~}X8FWrP#2^fGC4Amh^{93CWulsG;6!NHH3wQ
zXQroRuV4SVc|8K3f=IK|SZ$LPv9XinV!gC8OrgN`bT&hAQfuj!C>Q%3LGZj@4R7oQ
zz;<FHL+z}fprAsc9Fy3!YxEB{;FOzqCEz^-r?rD6fQ&}r<JPn^Jur_8@ETA8n}Z5Q
z$b$G?*RDjpntiLyUTu~~5^QX5SLWd0@bdJuRK2L#RI_xI3)i2Z3rTsqp7kJ52m9ad
zpK~JH_jW5sI?rU3tlNdbgqJVy!EeZRxlF$7;<-~i4XT!Z^ICypq^_<mH9dW(?$6To
z)x|L!JeJ%waH}M~$w&nCsIF7YBM;G`Vp_<4;=~m#m-$$fYHzT?en7)~NXXH@)@lX&
zQsQRG&PVn7%`c^e2Q!6>n#hn0UxAFl?v`}tgdJ4aF3W#NAosmrG}gNz+&l-4<}SeU
z<&vJc5l(gATFAW8F4L!fud3%&V*e4=fqO7~z*h9~WrbJ?YO$+V`L}Mcq79{jOP~Gv
zKf>9^>48%%`IfqYjis-NZ9&*sL0o0!a1)d1aLg(g#`aTDQFX&|*9dK6c)Cf5|KAU-
znYSc-UcvS6kpHhx^{?Mt{9^~jj=ne|p$v_~8;6^I$;EaCJ}duP7Xk@AdY1iCep)NE
z+40~lhsVO^=4>Q`&&OU7&O6Adf8ZX+PZZnXQx#(fQ;nA2#^%pyfA~#kwl0g0Ew{cN
zRpk7SXwhB8VMxMKaSeQ5EkeB$^5^}>cQ9L{;K(eB!C^<AdVP6p#PpGMRPPF~1GGVV
z8GU9?bzM;mlFc#XBwI`Db#&f<yXeuWp8|qri^CLX+V$hJ)&U*0mA|CIc)wYdR_HuO
zTs=eMU8{>dPy{+k=?#uLK}+fGc~=Bi?fh3~)!6Xi4?LBNl}N-Xh+CyOqps371_Y?*
z*PV@1^q9NRlGU$u7k@mr!^{C_BZYg1G0Jf}6Uzp%9C!J8O>nzN$~A4py{>{Zn$>?y
zqv)P2+}K+f-Rc_Wzu-<32SYv=Qdy{s2^Kl-RE!Ox|LHVdqPR%G^AxI-&^Tya)ka1}
zwiXVdQA2&(Wu(#%j!uB%YFO0yvc~VSlHETrX1Ka=*nwY|iAfA^>+{E#r*3?=CRu#D
z{D4-2T|Hk0VOJULHxa(QSq6Tvse1z%&pzcp@NAo&9i<v}I$F|g){a=zTDo!n80#=L
zsWb)z#F%iaMfgVYTE4;ij2Iqxp4Ih`pFzY`uyNCboV<K%wjsuzWi$7d4xp!Tv^hRK
z*W{~}XgfW?OrxG6v63xUzF_0fFQ(!RYRFT(e@G~O4Oj4}ZJ>O)Op-P-N&-k01yq3c
z#~LW!F?=c(%Vm}`@^Lpm;{XLr*`46yy9M+xrF<(FO7r}$yANHc)_XhpIr=K?Qem$%
zXWL-OxZAUS)k@a98I^U_Ap&oXgV=n?!Gy==hi-^~y{0GYqkg(9+Uzj%+~w*Qr_q6o
zlClM)p)G{1n>EVxvk+`tL0{zLK+hr=354Xr{G>~uFLt}+EDidyywE!EvFzWVfqxv7
znfny?Da>|aZy+9WbOS4kF)mz~Ds4P3x%l&^41Q!-6AEAjG~?k~5C?H;eXwq#F1Xp(
zEk5SE$U9j)0c0D=c*885oXvAVK)VfB<_=<wpZ~$Y+jqXY2^Yj}L%{nE60B!%CCfoG
zLJT)XCRSsXNALTwy84`uJ!HH|%IPKOtT1+rI6>?=B-z0r7gK$Fb~nG4Tc#|s=Td&~
zS}IaFywQHbzM{PR2L`3o*uF=gjzeAY2F?wmpRak)IPggapBF>KZGwD2LsR7F(MzHp
z!g06}dj@k}ykysuUq-h{!9BlSC9eh3r%1_8v^KJKnuI5R)oooMb802CP*oe`n0698
zy!9=Q>w#O2Gw|D7N2HXU=&;R3lc_OV)e9MOK<){+AdK2l3g9{{9cb%e<1oF38@V-A
zji-2RrnZ2b7M7+cLngZ>sbstvDM6f|Sy_Maf-OO>R_PG`9LGdAiKkugs|h!pJTAfo
zqfL~Gl4Ze}dXdDVS93ryN#PcRaqPGQxvO+>dCh-3wV@QiqR53%#BYKX6iabgwPRb=
zqvtU@^V1fW-8ZYA*Qg&KpV#D|4;`dQNssYq-6eWys3i>+?u}yzO0||gC9dm^;BLjx
zRuo$6{JpJ;eRTS^?9;EiqQh>~ILCBrE?qjK5g=;0y)OH!i6goq6myJHR^~}WTU^aN
z56;A4VP}<rN|)r(R^uPodrENAEtx8|8kE4DbRFzUb4SjYKdRR;f$-qq#J~Rf6*#@T
zlheSrf8O(V?Dn7W+TqUczcU-h)7@8-$M~*+UIg9fi)OcheJjt8TJEHxQbwl8ZPpb7
zPZQE^SKBOf*vfhQF+sh5|8chs3Oq+;aGjr^MK-TqBhqyIJNd^u^J;Oy!tV9+P`w%$
znUl?bx>qorIirAmEvKL$b}N+zW8Wpg#Iz&xT&6R>sFbW|-}PAq$vNwpGdJ-klKoU0
zz#}4VtHtep6CJG>eU-A?)oE)0n}+J|zgK0uZMb6ZWM6;uaj=4?*GCqXk-J9_K!B{O
zd|zDrX`u`fULiv#8|lk|J$>mY%?+!3!*OWT9+a++g{Ob$A0Cd!?oB|6fL>QQoqi4&
zYhM+xpFFd0doKk=U#0xMA^jl6LcViK8|d6=ZF#G`MKQsG#HN0|384u4@ld#kTLg#G
zQ61sTd-oh2ldJ}7kW$D#-WfQ2rm0EJ7I_r0V)&f$`a`kDNN%{I6u}%+R4Bfz&}n^s
z+#?4Ya^g$IKw)Dbu_8QMhV=fqGXMNvzU^L$J^7EPMfPo>kjVtOpfphB$J5PY(7+%B
zrOkH;`}?+CMbIaH-B+WX{T~K!U4>oD1iRL^k_;OlT;C_ecmDpnEYjz#+qZ`vG0y9p
zUl}uh#{TR3|HFU!wu%1w;je!KX%#hD5U&;Ct5LGXj?We3{2w;dKYj!c9jh4eJJ?`w
za?S%QdGUX|z?EMw(6`MJqXdcY2`TlJlK=2le*M*bdTe97?)`lYW_iYVo<{9y#Ry+F
z{*UkQ7x?vN)ZIW6envn1<d@ve35o01KcSohS8)<y@A?1nS$H@9@_1l+hpKrFiQ4o3
z_s?=tAIb3l_3Jb`Y5&7@@ZaC^nr_d3w2t`Kzqqe+@t>>xufO^qzwz4i>k0jjzx~@E
zPjCDG-^4#2$Ny)ZM4uEQ)~{dr$4<s&cH~X<FWGB{@|eFmVK~_peBd7w5ib5-_BVH%
zU;q5#=i?NA{^L6-#G9a`QarJXl-^e2VjwPOW5e|H$U5_5fGPMTbNSrgY@q(}SAr=A
z{uu-A_p9`|<OBuPIDUT~fBGN&Soinc|C<-mukX0u|BrBjKlIVGV?w2lMxTq=&6|T`
zR)8gmUu#eQ_xB9`_owS9a>&ZIpJKz!L;9579VM!qW8V8Uqr1d~cA|Ur|9Y?4|9Y<$
z#w5qjIVbAF1+uQw+`G}#Q%pKd6y-!z`RhNwdVa7<s#5XtkcX7v@vCcUo}RxSXrQb^
zDIR-cl|PqV^QMxcV`1%pi?c*+XJ==I3!oBY7dta4*4Eb*qb~cS4337iXtOS;q~9@i
zc*1u=ua?|0{<ZnEAjRum>w2Q7%`xI)I>FG2>9OY3f^!oB7jfxWnrti&JL5hcd*!4x
z)@qy(Av9%Yf(bR((FG?W{N34+yxjhMit$hJ%udroJd-yjI`cdpzNa*p>gnzv+2`r#
zu*lQpGXbDSfgdGhh;9>xty^AS1Pg!bu}7e_36zNPh>JyuGf<x?B1Ied`R$R9huLj1
znN0lb!=0!hR+a|x0$#nU@u(Brf`$8Ey9g0^Q`cW<f2^Gp2TpgOh7#4!12_xh>S6@%
zmX+}=KaC?8FPi?beR1mk1E6?!HmPqyMy`;NVd*=OD1XX$q)E(u0Q#ly5)wd*om3P*
z7S*%3P5G1L<IOTv&b){@+?i)s$8+2~-}$$#Tls|ISrq%tKDvr8P}Jx39;x51PO)jz
z10*L_CfCF&5JGuU9A;euTLzQdw&eW*&P`P04~m^Eyk8v58rs`8;y$Wjb5kC=(8AFs
zDZ!uaC*rD>n8>5_j<-@Y5XxbJfJd;UUR&R?gQEJ^C;q$t)UTbA-->&gVrO-4uNGcE
z_0y+w0cYvcvJ9jR8^VJ5BKA`&%4%y59yoL;?)B^QA;RmlNG9Ds)IA6d4MoB|;-Bj<
z>&{TSG}`C(B3rwxV_#$yk_XmfZ;EOHycI59ykF_Ju~JBmd-CLZJpM^bsv3JUDu(+X
zWOGdtkkL@@m4)Ng-VlxfS~M`sygIWhxi!gdf?wd_hPa$b4)0@+Yo|Fl9s~|<yOY<+
z{2PVT!en=9v6D#bpB81Tp1Lb9YVgJfYkP?oz&2<fsvpBm=(uxRpMYheaeIW+gUR*v
zEiEaxlIhvL92_`WgJVv|@juVMnJq4o`<q9*3P_{v=Hp+aZVJ9Krg#@68fm%nPL|yS
z%Vvt9H=4!nnX0M2rlfA@JyrW>mXuQYc}*kHg?LIj;`C>S6s6QcbR}uW3u>BYWVBKm
zqK|3j=T8NF{cY?gDGof)F4MH{&@5W=Q{$$%9en=i%+GUwD3^Ws@H=4{MAzK=I^v#A
z(B>^$4tI)+8{jX0hJQ~`FSstM`Ze=g(dl1{^>6>l|8@%*(M9pLA_w~T2{a0y782^7
zQ$hQxV)76}zS-AIu>(4r#=8pYpS=pY=hNp#abL%B=KJrE`|-u%P$P3)cCX!a=|1sO
zU*E3V{BC2uJ@P;urPnma;Qzk;$wYE?(UW@5o`j!2t)vXSX&bE_oF8p_s+U9V&i*=K
zm#SXi^YF}l;Pud71Vj7z3?NXH==S*mzh2pMcyTZ>*O^Y8sx`|S8~@6=GF>%gGa`3#
ztM#K}7m46|e+{CwY~U4aq4jY9Q_gA@U0hw9(i8mOdB%PE2qG0aod_y%I6FKdBJHq1
zZh>Hl!z{N{C+HG6M@Rmxw=M#gX<A#(I=us9Gc%kPr4aYLd7OoJ%w6Q8$a{z!GTE?M
z$?M4z{|dP;^B(@sEUo~nZ$ewlY1Bq$M}Zu}6XF|UNQh<B)60D>n<=_t{%)s7JUEJK
z5hAUUNWqU2Foll0V=x1qDLW}CttHg5?;d&l>q&~m+zj3W*j^f%G}cTfl{0e7GtUcG
zCpRT&kRn{y=dXneyLf&0hjJ*tp~nAr+4>M$`0Y0yBW?eiPvWl^?9<mHk~6UiL~TrR
zQoeZcc1dHZLZVkuadCJP4O`gQ%o5Gn4t~@4_;|=w4inGMLIVr5^P82p%x^`~`M*=!
z{wy6&Qc8`}EMAfQiAO)ZhmLkLh0JF30;FGmw4qn^Kd;yP;C%VtD9o5*B?9DD7c?-c
z*LHbzdv#fvD55Ih%otz=F}Jefn3)FOj1-`HZZ*vl<I9DbXEeJM!uCUgOBoDP<{2uP
z8d;%}`OyXP9e|2sV9dmy3nS?iFY4&Sov0{UQFNaWKXT-VQFq}Z==oA#zrKwQ>W^l5
ztblfaD1Gj)aD!*gmSq;$Xqe;96r*OXJk6W$<LvBwCr33P*g^c`M{$1Zp={t8X{h49
z=YN9iumr&0<KvCHXzH4wrkY(7P|cg{%XS%U5l1|$9Gpf7wd>H#(vNMnyK*H4FwNwW
z5Is*?D>lOk@dpnsjef~UW>H8;xPSlRtur*xQo#I9H*};}M>jcHyG#Ife`n2MR7oO<
z7c$sb3^z;wdI+|g>KVy&29}oWP8q5`-&sT7^KyJj4ph-eDTcB08}p-F3NKHdr9Prb
zutG0l;0=v;Lnw!vnqs~ELqb@@argKV$ONx_m2awQq0RGeA&8UmcfRA|MHG4ipdjFh
zc>#78j5!p)eH%PHRZ^iNi%XoS?xqJkRo~wB9a+^X%ua`*nB9J{lyr$znXPrGo_^NG
z9I*mkJy#H@e6w-i-u;?c;k%9*Dpc_luh5cXQ$z)z+o-oBSx0vuY&2^BDPJItk3xi;
z3Q-l#YMg{3!syd$Pos8UWf_@ga1zqXP=R+>5>$<>9McIv!xT<5o?}URqnb1N8ab7(
zfp*qc)b+&MHk|Gku|YTzm%D!b*8I3b-ar@bQ$zd>(=k8A<jO?X^-3>a-{*Pu%ntYN
zRRg11Tb|{&JSGbPL(>Z;Z<}cytCDn=)cLEj&b#<>h_d@8%1U_)izjG*24#E_VZ@vE
zr7c0ae8~XqU9SvP16Q#?`<T--;&QPgr9z(BmdB3+UgqU3ZsgboOW+3OG>|g>_~J2E
z*Ek|g`5E_6OX5qZ-iN`H-K%sxd68}ruMt(K9ZH8GuU3TXqOQ~DHx3<H27$Fs5Us(h
zX3|zdt<*IKrCh*(IcAYQiSB+8^EE4etopfV+{EDfN2?dmcB|f*oV+Rld_XcZSE0;Z
z@&Fwj6gBM7U5p|&N?hknTAno+TbkBgcJ&}O5b%d&^#bGtGcQi)>1#GU-X*R|vWrDm
zQ38<6+U;7yw##CQ8`tIT+}WCA)_n<hJMrY=SKKfu8xUheG@1Rb^F!Q{6;(V66<(ir
z?qVJOF%^dpu{aryjTME=Zq{vGg&mW;ZpY7-k{!!!+2gxL-xIHV>5;&J0}5A<9GUc8
zjo`PH1H;w^$&Fst*R&B~ViR=b2Lr`QCJrk?Z$vxr*KF7IL%<=_Y1!1Pn^)cD^9r=f
z4qfZ*G|EY`9MC7eBO06s^9@?|lg1n5Ze#$;(3TcBNAlYi$`96vRkycGgX#PH3V3eK
zr_#pcnZe_&39_7usfXe*LAkcMxtT*B2Q_73>e%%XdkSR#gfBpEvIu!;eaf81q3!jh
z0Ub*6qJ3m)2>PhU?;1ZS+Oc~#Xv1)Y=&Pnxf*##w%2%(t6Bz}Dw;16$u&thkNcCxS
z@2vy6D@BXCLM?B^1X|O3Wj1ZP<ZB0&ov5d0RkqcjT)Z7DrPGpRzD*URY~3})+fmPY
zS+va7Ag?D=g?&-ak5Re>`Zb2tvJW+h*29xtJ}G}{X=&X`Rbo1&^$F@MY*ahg^)~9Q
zF1_0#`u*EChgNF~@|L~e|3HWSCEtPbuf9;`eQe|LQMR-=cr<Hwa7)NJJ8yy5R^t78
zJ%vIW!)t1hK|!wvYd2a}=8e<7^>8Vay6Pf9#z4wW4qvp}wqe^5*$`w{`4?S0B?6KX
z^t|nMGOH<J&bqIwimGZ7JelIlJg9(H_X5%TYRpzP_Boz?d<N6z<w{)_Ynx|hmio#)
z2cUq@)ZN_?C+SpC(JFWG;%h;n;<<LM8y8$w{4Z}vWm>n22skZd@7w2Vg!91fIQMp>
zfY{n71sFOpzo+>H(=O|x-us&#g;g%$Azsj}Wao=`xvtioZ5XbUx>B3%i}upy#a_RU
z%8c_8Zlyp^cmB?tOsq8W1?Z<GZr=Pf+FF~VcY{3q!b?|BK?Qtidgas5)7-gn(b8wc
z1KIROK1HpoX6ZlXHdBv>I>uS66WL*^nmzD3+wWsz!*_MDYi#@839q9Txkj({X}TqV
z?>zz&ix!!?iWA?WaQOpaGNcamjE%a;YFOn|skGwd56{O`rI@rM-gkG4&X4h2sPn*e
zN-SlZBt5pnd8U&mzdNROtxzc@l_$BZvH_X06--B+#B}mVGt>idc*KR++4hrZpipZY
z8>Ml>;q$f<=ft2<3ObXli>4u^rKO1VMs)jebC0bpTf_GG672HQ_Mh4}!n@_7aMk6%
zyQcn11`aR~70Y?l$tepHB)W$`9h{t4&(Cm+UG0fOMq=DwZVA%0_}iLlPCsbZp_vsN
z;$<>pS8af|Oo3IyF5WF$9))ct%v5fY$(wv9Y{!&FK<62K`S}MhEI;`@=SOBPTVwMg
z)wqT_?xS^|5K?rrZbu|fG)Rc!mUr#kN%+sALQA%va+;fOKMu50xGbZmCpL^o<3qV8
z=BpS>hYc;mJUrr$zSEKNzLBipX?w<tgdPBquv}do7FKTVh71<~X9yXW(RK`U@vP+R
zvv5B@zipI`H>p{=%vJ=D;3$&pG+NU%l)(oeXl0CSZcj)EQtu5IU(L$QykPl8Ty%0W
z3QeFa01vbyQKVeHT$6;OYSfwg5*leI1QS&N;C6+$B{?W5zQl;{3Sb!=_#*5$S8a=8
zZE7mL#AVy*T-C4<SHxonhX6%fPm1Z9@~5O2+7o0q6s=|+C->NT6UC2>=GRPZhd(G(
z;-!ReEG#5C3#>z%%@Z_8X1T-P)3BWw#-eson<)cGMhvZ7A+K_Dl(-m2)WU51<Y@Qm
zk!JHe1!hLEt1G9mW(YJY;^M<xdNou)cW*=qzVtmzLW0;3XX}-oo{p{Y=IYasyCY2%
z#A$r^sFt_b4cQkAfmQq+=H};{UtbcXKIjlSVt;^vA*HYHc12}nqGYIVN4{k^I^7fI
z=H}GXHB^3GnEHr_DY(;k&$gAW1g|VFV^eD3DW{?KGOqN|vesCOd^t8<tdK$%ed&?=
zp$<y%nYlTI>(zr+$#P6e;BlJkf=i9c+;jLev;H)_i6k`5^ubqwkpX#r=}i>rIlc1f
zn#ZqQq#m)73BdkpOFL{{EiEHs0k7+_vf~O_`lj*OiSllCYXZV0QO#WIYip8QDD=(K
z)8+z_6g*oY2YVtfoF+K@_N@hcv6H33@2yW)nE>kGl%DcyHEMnLKy>#+bwG)ng~eN9
z_oKxAflWq=yUo^~lrS2}iqaq%yR;x>gPyxcl#;$Dis=Ros3qpi&e_t7rHaXRumFoc
z+O3mO-Px%I5sXrONDlJJBTo;nJ{A-bn(1a_AGNAUWpi7b9uC_qudX5Tik&eLrUJ?G
z@d9vUI*y4~pEq~MyRKgy?aV7Rq#uP$4W-d&*RquDq;ou|rc~Habr}l2&{#0%JbP9W
zK}7+q0p-D&zvSPgu=ZZPef#xjTQS4E`NiIN!*3r7lm}bY&}{5)7(NUn1iXY|nz|xr
zo#rnY(Hh&>xN4DEY$1}CW_w(Z$|WTwUOq*Vc;7AVl*U%OWp+fzNviRgqL=w{>DqZj
zL=Bd%k2mb?f1Tt{i}+$jHN683J$*bxO64+Cs%K~jdm^?p_x^q(m|_X7EOfF5ym+DW
zBl@0$1K(x}nxP<J5uh3K-(Qv?fEsuB6*pZ&4{#_Zuf_iL*YPB^yb_!+e&5a#7w@AK
zn)r0_mSW2@dBlT;?_x8WA(L1Xbto4}=h+ez5;IZa#ewIp%brNkEPfRwVx-ilHPQFp
zCGJ7J7t6-uD6DgHZie&nb>bl%|Dm-Yd=>2o=vQjRNp)EsG+5qwdJu;c?J#oM+TY?#
zZv$i4ym>Pc@KmYr$(H_#SuQuS32NLy$BCWPZ(7oO*W+eiLpl;Gv7CUj7Qjjy<xV;E
zsq*O<mu3GK<DDw%VJ<6gSVR~jn~-cbC=T8uffi4}IQP5n?tAREeO6lP7UgzI-#QLX
zXm1TS&Rn=~Gb&0uN&b}PE?ROFYMw(6vsx47wPa<f!$&>BhA8kr4plDUDj0?RTkZ7v
z-R8JQ%?yhXLIN6XvT11pNq&b=L_=QDut(*yP6qFg6Y=z`7ED)MKLiQZ&mU;Nmv9a+
z9g!5HR0^)$h}*kg{uT#EfbC-U7J!CkPY-fR1hNgL3VZpc#k_yS$m1NXTxkLf%IoRV
zX7aidm)-b}&08<~cqXP?dUS-d*aH_zG~2|NX(^Z4`ri4C)>&azr86HnC~nIJ%8LgX
zR3}OTo0?gql0n#o{^$k)pT$R(08XJ-*KAbWh_W%%5+W~UNli?(>b{i-U>QRzNW1Uh
z&bfM?=&(^#uPe#2(E>MzU0D^L$UWXE3;s5-guG&X?b(;2r)sK6*ZhRzY*T?n6%}uo
zN&j)AD;?GZU#F`ubcb*3Qxxm}EOIH@-%0GH$fpMBc+vL9C$6dr|E9sM5sSSd*Wu`R
zHp2lKyv*!SYHOako9Iswf`)Gg=*whp@5kUrkE|P3C3=VG%6$R@1Ks~vk3YI6<OB{=
zMRrQ<E6UpD91xzP@c1xmPf~OPaG;pHAk|4kcyRDmMILycsFutR1%15Pnq=uX-)gV1
z&4a@!5HTeh1E{ILlJ?Ni#RO`u1RDMn$?CP9DyB+675IH}(pJ>93U~X;u!xr3!Jl<E
z@7@i907Yx(?%h@~8u=FQ-}Z^{@~Y_7x(|(nNQUs1azdeorKp|HTO4T?k)D5sm4Yvk
zEVA_KdDt2UHbI<~3iV{|Y~I)u<7=GTE67hsal_vbZEy-cTv&<>)~{DJdUyX)L7P}b
zconMgkyhniZc6?;l{y&-QsIt{-yZY8+r(aD^y!Bcn!3>*($taLht?Wx{?yJ%a#|$W
z42Ku*TvucFnySDzI4uf;T8@l+zfm{#_2T^0#%qxOp^b~&Zl*WI#}^rdo!=RfbSi=v
z(y8gyx?{Sj>ZeJmn%#VFrI1WZMF?8fFWcMOE5m??>&_F79S^=b!9>vjx}Qe{n(at^
z;9ASxEVit#=hW-6VWIj=CCn?c*NTbv!L7HuIO{|6YV6&r>+2;k6M&17Y;cml@CBOY
zsBvi*mix<_Ar#E_dz%Mu+u$s5B0H{(&;px`m|B@b2dgYH*5Lxmv+{91@P4HZU}p?Y
zUoEd_{q!lSk?vt_5ISi|1ojY9d+DCmy>Ih^Ib}Gs^T2ZlM|e;%X(BTDVnvm0FLf7E
z&VAUmQPa%%UT^Q-hADB`Ge2LkZEwTOPI0~-dW%?>)dpOlcOypM|M(%{I25dmBwn_E
zMmAO=1-@mJ&3*Rz15xo2hvMG8wQ>mIIiG8<gfezC*g%t;k_?v}i?{BSP8z^^dBn)O
zjBm;VTaR$I3Nn1nl;!%qmYoWH`N4u3rDokLAkgz9AGH@8;=%27OIl=ICrxi3jgl1l
z;7okoeq$nmD@SX$X0^53faAi5ci~!CDU*F`+TnDlh-r<!epg&yd3xba^?<`@BuYam
zm|tyh#+aicqUt>4fP(`AFU#oCUyaOq`lk602m}_ZTkqt56={F^!Ugp*_hPdhWCQ-V
zRGN6;m+X57qCV_nP`^s7Vc;eBKq$saD9+&l29qrr2Gq4!g;stv7q~_%4;{dwwL0fz
zn0DB-;9v&CJN@?CZ$A(<P~Q~nQzWwKDAUebTNTZY7}i-;G=(WeUzMC`b=$FXXWI?-
zVne*Fu-}2<1p5@FWcS?;T^E+L>~P^ZjwaGtg$)$FfpiX{ZiCh=gI@LF>a_gz1uuL}
zJ8u3U#s6k&J`ms~Pw~={JMy+D`4Gse2%f_lS{YLnEKAEro#kTg(6d$Rd-o2u7O!eZ
z8RB4ahf3O!y63`BARIc^cQmlw1fZ1m^I(Jxu<sYpGJz(hM%Bza&)GDKe%SZ`c-bIR
z9o*~)ET!GT4;UtBkdN{QFPL`J7&;C6PN3dxo>M_y31vnFvnjZOf}Z1of|n`j3pHh4
z1urkI6S)t>mXy0FO}Rsf3<7ikhzwB_3!Lilb`ymwZW~kL@muu~tXSVUX*=g)8-xMi
zS6?IF0DfV9?-U|e`lnBy=x5Z9od0fFrn3S4C{Yx_PEN5oe&bD!u`(+wYwb_pJ8m1u
z;|%j%L%9!Ity3ah-+k#JTIXWXD8@icJ$|meN!M&%CS7ygO8rkWs7_~U%?s79m;%Fj
z^=c?n6Ye4LC{1PihCk;`5xGjMO(be+xh99QtOUhm-w^J4r;FKd8gyTttcS4b5gYAK
zgf~{sX6GnO2`WY75m(?aja{*<LhlD^YL+XBC?9r@T=QjUd$`qlZY*8Iki1qPaq~i(
z7W7Jr$SSBi@-z?hdY_;?vKE8@KR6R!pLp1`EhQF;uHa$8@3Bw$+{j_ItAi)<tam2&
zX4#INjGyS*EYxKe%5guWLgypLb<-S^OJ}H#bZMQQlCiM3)$KI3#oeklarbCjYT(%B
zdCZ7cegA&w!F!07Y{+X4q9T)%r0vy>y`?IhwQo|~(u&xTDmG-08#V3QP!UZ}Q_hBY
zKy*kHFnYHDUdSaTGE0p-c<`WbIN||QT$ok=;9$7!Yae1aoH|9{Q643_fv|)wQt!C;
zh4S+9Hb47ZAx{%UBR@wAE6Ov+nUC6h+l&fA{G<&j>CS!G^G+b%Jk6l71Z+YJ8b>fZ
zZrB`tk7b|SH8f}k+X8p&VvWaGYO%meZ_abF7o^+}5)y(~A^m{ip5##R1?ktPY3`8<
z?KX*sbm;)5iT>koVPRKfSeQvdGE%3Tk8W$EzO9^dPy|T0jmoud@XPVDXX~@O?~P};
zLGCNmyO^cg-4fqe>`q}392}_b>jxp>%3J}gdSAS-s-M-V2;cb72aPOo9i6*caDLLF
zwNhyL`&;$&?vz`si2NezzHTPmp|y4w1dGDZ*~Aw(?C9h)HeD6THD~$aMFS8wu@HXS
zOo&S%Wv~lsP|h{$&iGXGHeqE>?3U|SM9v>rhVP$p^=LZmUuek4ydEjGW+~0jKeUs|
z4|Nwx+>e%NTLLO7+s;X*%SQXwT4zq(kd|)8@aVMV!+3C?U^}F}<9<*?#AGJ>58R~a
z1suND-A_kF?GDAG;g`4Vl2va}e&rZ6vf=zz$+&5f$qzT!e<Y2GILju=QP2PQTs25W
zgW{n|lTDj8xli$*`usTno^|1DwJQWbA;CZ8KZ#ozdkDy$n&;{Gt^-wqqKlI*zz{P;
z{GUIM(yiK;t-H#7SR~?ZN9E#(HH77p&*E2AQq3S>_MmjLIUa8gJ70Ge#iTc=#ONRX
z(P_f1cjr$2xc%Hjr$|-r0DeBq<l#-`wS0tDqG=1&Zc9G)O%%8PHp1i=F!1{AFTmbT
zGL(FH&2V<;X$Yr*yDwvDkxC~(44fy9Gbad;XLTW*%V}ZvwGNaR;l3m7=J)@L0gICs
zb~shlJM+yWlJD%B@C$}T1g4ozw6ZmgL;z(Ahy3>pshbUO05a_h7Jaux|9lEX7t6VG
z*AZB_)N%goq&jKYHCwJRQnpukH|**pQtJ|z?Z}o&XD6^_a!m#9f@o9@k4ynrm8@Gu
zkfaillEkpH8UNB}&oWtXo6C265VO`e(wlF|8Gk<Ks|mn$hqOgz$flYXu);au(Lp&V
z-~=@xFsC`TEz&n=k?e9%_1@ialPJ%-T^84+Hfa#g6>=w|`jCJZG1RQD3@g0!eAgjX
z#e)<aC*(ATxW_#i+}xfX$~my-_HJ?>vTd|v<nbe}#MFBCVDg;p#`>efmt>HLnCDM@
z0ZIu1f;V>JYt{|)p?!FJ&Z)-V6A3|JIE@Qtbc=~yRr&;h6vLo@SlIXhx;VRu6*NWt
z&d0Wfu9L*0a3XamAd>~A#wV5*iK4`y!6sbL;WDz_k3g<uus-1p(+dkq-ZZA@9A%7a
zA8$z{Nd%nVHn1|=_*k{TDp)G)x=jqS_G@V3<ND2K{ByJ)w~0!!zrXjg;}K!uSSaRu
zpGAa)rNBOgzvkA9npc#qIFwT=Cc!Qo22x(<{WLXuM%yOX%5q-fEY5uQ?8r0s)736Y
zPmja}nYy&JA~i3WC?`DHQ=A8~%Am}4C#mOjlKD3;EZ@P+JWm;x84vTmZ5+wR8YY4U
zE!-eqk{WSY>550X@>-^3@y(Lvn`qYH5+{<~#3!7F!&5JCS>C(%7ZFDGj1wCLnBg<v
zcFK26Z!Q#)k@ebl9O0W0=_qxZvK?78=_z_YatlgIp*wD;n3%!$98LJp+pDiJ(No-P
zqXpDEegZuoG&KS(z$mL$ox$w<S~sij&k%W#L*U|1B(F1`|Lyq*s`aZ+SJFqg06ft@
z?7JTL=njm;=;A4;2__i^Oqd?mx6$c)rj0v`fD)!^TBp8HV;I080lVylsot@>*MOR}
zBrA(tqbMA=4P?dhLtM=<q@S&z-H_MOdDxtR{b>E$qK{8e>J?<I{C4B|hj@q5OJ5l+
zjF0$o!_ZIC(vr&tg+onQS+`8y_ZZ~q?)KbVTw>5gCZb*Fj&Zw7OX-HF)O-x!j`c;V
zwovnupt0h#KN2kP;UvR&rEpVP`A7o{GTd<+*E83>pEB`<c0EP6P^V<*?%szglL*Pr
z(Ejgux56uy?a}ORx}VRETF62dPoQC-fIogNadHZj3+JD9|1%SV#~k}T2|u9pb3xn8
zEV@bbTlRx0CY~e&E03a&OwZ5DBV9N=A#SGo>H}T#@U=WMA<0J#Y%1rZchNQ|0#c4n
zSI2>yM{vVaA5md3H_Zs_AE4)*IgdC)V5=WL(vs8D$C6hkS3RP_KrJ1hQEK?S=pW;@
zKDISp7hQ~|Teoe~<jM_AA8B?wE4$3TTX`eOi_q7H@hV{l+01cZ4+E52-+gHwg5gx6
zphqDWtl17I2ZhJ^m`D*f&HX2xqaSTw6xb|=AD2kPqS+_PD>v3xy3-k5m)f#7`X(kO
z{JD+WY|g5jt70}Kuko?SpS*(Z+a&po1W}I$aA$T8Hiy$*i!4c~Wf$<S=)WK(flFm!
zLd|Ae<sq7ZqBKakw8V{sdLeAZKxBQc__!Nb9prb-1VXhbadn>5YiQy&RA(3)A1|<V
z&Wel8Kc>?x`F4mVu<^iBE~nc|<Fk9VDnhhUCEyP#8+~7zX!f&R+w1r9=MLZ?LE1+W
zZv;l*s23P&WkK2TIF?A1daqsnAd7nbbXCzbH9B?LA5oD-s^}K1I)5bh6i<C#n$`-|
zELBc-b-w_~0<*j;8tsw~&xeB+g8x;`-e)`_gBI-?iy^rKaBU_SK?Xfj^g}WBUc~kb
zY&EhyxMR%`W_w<`5$}Pc17^D5|7~uhl#cx5MXQnGaDz}wrXGE~UEYnrNsv*Gq1UyV
z5K&*&fO-{aVUgYVm(eBB8>rkqBWuwK5`hUvWOLVGTWTm5;D29{>cPRmSWwUh$zQ|*
zSTb0Y(~8g>X0+mjbk6K<GutBL&@W1IEx(|E8GtS{i<ja#@+x#b6R^^^GOf19yJ&x?
zU}(#~|ML1P0PSYUn7r@?@{=0FqcgELf(arN9ekW+(*V?1KQG@Zm|<UE?VaL(XnZ}8
z)*SJRXjg)<A^%<8_-j-H{r2Wla_(ZEiJ-n`ZOSXsjjV}gFMA2^r>WY!X4ou_(-rY^
zI4Yy_?H+@Cyb@z=hr@D_(Cxk?k@m{v=p^6~^=(@?UV@TFV`yrR+Xm(O+U##o`&KhA
zX@U6Nz3Wny--hbTlP<<P{x~iU@2%FK-`JTsXJ5!Wf~DFyzZ|;tJX}y7T=gTj7+Su8
zo&rNm=g6z(KdPUX@r*Bqx<pyvC>y@Zs%^X=55@cQqs3RBs(!7h<&z2W@F0Do(=F~}
zpg1Qagsf_!dVW#u3=NnIDDgFW-9#$)){WOpVTw;&rSJNO@9SpTjzVaC0?6MMbMvYZ
z5Im^|(=oLVir_oIby&!;yx{oVoY4jWr@>W+E(Zg4Q3`j6kw?4jwK#u!CEzgg*HxdT
zE0AE-v<rFh`$3SxdB&!<*eSlpWzp8Ox1@D1!}S*s(BEx}F`oxXu=~Mo>=I_M_+{3t
zNsiH{OSXz9$s9$c^!_0q8*MkbIW?g;wv+IFa$4(duamYL`wN?17pg-|anc)NXg?}w
zCP5Sg-dh%?WY<*RzN72Pg5+np=7t%Nipj+=aOnuzQih1Ml2eMsg=2-BPBJf9KYXY;
zNb}YFYi87^o+wtASSk_c8)z4@_-*FxR}+M}Xsnc$`xJpZ7|L*e6wH60q{uoq63@tc
zwk9wJ`j)XrR6TX_t1@4_3VWL}2EyIX^ScVl!rUnYB<g^|wFm)wB{WjN>!5iy0L6jN
zVt!Ml`r)-HD}k^$=yZ+if}St$ykIS~YOjAubli^Qx;8DaK2v)l{(cUK4dN}p|6i-n
z;wbafej%mgqbilia^{CZ*@G97VevB8svJo_Dg;snWN6^<D$HDz5Yb-!!6^LWg7B@(
zJ5hjV^>~Hx0ggu=zv}!3&58U^FEvDp#1jIsDqlVkdueIu!1sCtwfsxXgVgCWj4I+l
z{|Mwv85$<4X6OV9uiVXl@iM$h80jwCm>>m@JF+{zt)B|dm;U^Gtt>~oOf}y1qSee+
zj3Bx-Q01m^`a$i^m#A7=liRC5nfcH!#-d4Sbcd^bY<iL7{7#p(=}vc7^-D3Jx8T%!
z5o!#}-!@*dZG83s@}iFJfOBEZZ^Sx7PlER3m=5Z3T~$Q4WksSNp<5!*UohDv;#$@7
zLDBY8t|wi7JawEZZqISs(7YD8D4{hDCxEsu8CtxtH{@^&AP6(REFsO_o5g8y?{jlo
zJS&C%6mv?KXETH5tp1s-UcxT2fm%{DXG79?dg$VQ-(P8jy$8a~C8LPY&a@$KwXcc9
zx$`}&Hcwtnr(el?{ydLw>*`CNP0K7wDR&&x!FiVzDEl+-*EzjfI&~}Rdevj_n{yai
zWYiot@7w1V*t{QV>vVyKJ{sLx_O095e5Yl!cYxajP{$VwcfiXqiFa~;ZTA9%f-L&@
z=|TS+1&P!M4>JXCPa~=r6n7<P!k<*=1uzS)_SQ<j_r}4J*f52}ea89M(ASUsA_)w%
zCou)M0XAMDmGC`zWZq{u2K__(gACBLze?#QID#L4?zat6ruk5v7MJ5(yt~Upr+xjb
zkTe=w?Ry*~p|rL5wIrKf0=zE!dE_s5cfOKjfVH=fmwcPkAQS^lG1Elu>FxxS(uOa+
z3j(w<hHj8!MB{S!!-M*IdWH}lISz-n?{@pE449&P{1Ka!e=2PMJ64OiLkej2d$Q7c
zYyfK@sjCzkt-~Ud3^!}4s^ZIshLI?S2s%8heLMmmm_uBnrS4*Hk*mK#UMjC@W8?E}
z4HN`lj~kw|R3|9yxT>!vK^@5z|D^@sZmzIOQ#nIZ_J-7&ykX_weD`kt!$*%Gk~$j_
zn4Y;d6#5*Ey*VSo(7}kljfaK|g;E&po4B~R(c#Eadx>4YGppV8ehspcka~Oz4}wfF
za2VUy_<OY*J<USTX=Jqmrds(HN2@OSF*7ssTlVM6tIEh6jE5|ihMtBY_wMJ0K`vyA
z2lmNvcdiy3Yjl7-wE&gWpw&jMX{hbW-2cPgcSc2(c3qa*f+7gEB1yrFA~{G7ii)U!
zNRA~Ul5-9P7yuOoB}<f?DRK@f3JOYwA|oO>6tN1bsAA4--*2YB?pfc@`8BN7y;LgP
z``jm-v(G+zTV{%)(QEd(z%&g+`HW%2p>@N~*%Jfw6$nMXTv&effb+cwHz#LeAc`I!
zDd=l|+nv(30I8JCzP9M_ly9bhG9wXII>H`;U+ab7p++hV02RHW7aZHc`J?Aw*nhAp
zYr)}g7x=tSD3uT;$zrP<sN~A}Xs8PDoOmzUfddx7#&psFr)>s=h?OW?Qxa)}RCQTy
zayXw}_b#TTb7r1N)-P*l5ULqjT4xA+8X?B8{#usF%*yIT_wI$1rHgQw^pzfLH*UWb
zz2`w-K!9}m*|Q1aJ|#M>EiGL!LZ=xv)YW<BNX=Gdu`~r7@I+NVxECA1$qXcnglQj9
zyWwGnQ2TneNK=jy)8<QjhMP)A8V#*CADBcRGzN-E(zMD!Dh877B{E}R6dtllAhc-*
zo_1ykgX~B2>{&@#64a**5|=zzeqMukv29Yk!n9dCLE2o7KSpv*9M1VM1f>#RoCpkv
z6j621%SWnr<J+K2a=w`~33Co+ntb5;HVtO)onn{yhxEItAel}7D6s&zt~A{zI&i>R
zb7yb51}vCPh-C~Dosr#XqjwtTgU2^;g->jEtj~rsZ1`GO%&3I#SOZN))ah4)^8)wx
z_^sTNuQdUO)~c|>G!{V}04nJ;fpW7IW4>_Dz<PKHuZc6Ee&>zRASl>8f3D>GZ6b<~
zg8{DqfbgFKnF1lJ&Xeu()6l(*UfZC(Mb`*2SCEod@INU4{>&_-7_422ij5_*(+mSm
zqxBgRI}4A-u?GunigY!roboJ_+E^nTHIjXUQm<2#va_@Kn{72RsWvwl8AAmZt&cWC
z?FlKmG<tZi{^D|yX@>3;sB@~0#X-W>8rAf^;Gtj46jB>1GA)>Y2|AmzP`sRyWK57I
z3f46P=iAw1S`AX$P6Ye9du)w<vQ>$l`ua;xwmi@{N+c62pvG$3zq~U5e(DlAij)bg
zcGTH{;xnyt-&LZd?JDnc+!m53y>qywF3mwezH6Vd|C!hC>rO_TVXA!1@n;u*vN#7l
z&9K8RQ-=zhs+O?cn!M4xkuk22fQRPV($>~GVHAptT4E5}_l2eS1m~&viFo%44gyF%
zHk(%F)PN8kn_?kGXJcanI9|EURXJ+%M)(z1odTcsl(9GWJo9>MS3!}cW06s%tfFET
z)JZNy;;W|H?%w#KAcgxso7aE-)NlgD^qviynyLu0Mp3wlzPzoDeg&yxAc%(#$E}m*
z1-xXZHdowi2Ok)JdYdRWTsYF#_fYDbh_g=xmNM#XKmUl<w`;3GiHl+uYKZ&vJY3A-
zoug1MEJhj528%aBdHGdU%2id8<zx1+r$Vp$yXJ<>w6wQ!?X3bkBYoER{-WN(4y`Z{
z04wIaklC5q982IsFHtz{?d@@My<F?9UJJfSpxxueFbgW>O7z58P|mo=6FO4!DmX^z
zCF`uvCz}tC58Ng%(5RMIa8>jk1d>Eo;qgC(-wR8$%KC$2r0EFF2^U*N5Rp9GSpV$V
zzJS2MK`KAQ`zi;{SJ+Vu^Yi&+yWIBvWY4_))=ml!;6mv}6<`q7`Z8m#hiV#z82ozn
zW_DZZE6nq;3Ug1t9vAZ?l+?)bXA!m3aM82f=4|Cg{Lz!U{Vv)!*cxxvc@)*XqqT33
zp?2U0YTTo<`Sr@)%+8*c+NsINxW2XJX-A=R?s!6$o#HI_sD^}br<SwCDP6Lon@5xP
zbmR7L*<r&UE>aje2?-;rogbu_w+~QDirun{iayNGH*8I{mdhzUc#t*=QqKKW^Rn9T
z@U@w)*c0)?PYl)8^P|0Fv3Yq{X%8-xY;aD;i}V&kG^?t?n#Ua7YDQP7eCrnO$A?3g
z23vJx1J~joFbj6~_h*5yEN;=0mT^fOQ?at59JNtly_|do0^e&e*No-;JU!n+a`A(}
zxgV^PSp2D9WuN9%R}X5o=jZ8f)KAJN+q22}q-Ez*XHqAP+kua<##&$n{_AfD`1U12
zOjOiSq^wZbE^AZUVC<*XUpQ`RV0tFEC`)Unn?fsc29#BCwwNfm40ErjwnW+X`@AOG
zozLE!ZjNc%S)z=P@jH&uMdP6=^6XtYr1eMV<u7h*xIzGBR_DZ6PZ&I49I9966>x3q
zY%FPeX}FPk##FHOOg`G4ekM`WGH3P}@!n=&AdQ%44^fv5q|yMTQyJkb@$)N>jf)#5
zJ$jxov0I39?t-Od<H*v6xXs=>oYLB+vB;V5XcpAB|L7(@%v`b`-YnAB*S9fx;{Dp(
z);1s4;ilZu+FEwJat7}-r+Q+FtxeKAaMrt+L_BrTzRs-H{K=CiD)JfkWgm{F#Kz9q
zh3WzCagr)N>XALPrf*=NvStHvy!xEhV%S<>)fr5Z$Ael`*36d1lm4|>*N^N*?TTN4
z0WD{~t#!wtr&K^lsHoj2RN$n0U+}$fhM~`&uVt9lZ+%A&Pnp&eXJ<cM$?EHiYTFsm
zV>NHynnvI6=f7}4+sG&Zp?P196`nL~tcRoHTPAU++SR$jPfb--$VOaLbn}RVmhNl&
zem8WbN6s+I&+^jJ^U~g-`Ob?peH&uw=}qLGafg{iZ{O^fFK>rVySTWpE@|Z6Vb7Hk
z_M`5N!ir-^HjQq2df8Uip#!9Cn2K87HAE&*N#5OE->+-Bd|OwyGTW{|*Thd~t0fXY
z|JK|Wx77fqk|qX^l+oqEQvvIc6BOh-2L~U}($bpTknlsB-o2YMzDXiU0a`iKXU!!)
zS};agGHINLPG0L>*5cb*Ec*H{lN<>Pp4Fr|4jG#JH-&4bRwfo@wa2`R>u*ebeh=*W
z@-hW<7!Oa2>w1=u#3!D8KQt4CD9K1;z2uC^$ERNd7qhY~6yHAtRxx2wL=JlFV;_1Y
zL_~;I5C;cL%{uz~E$B{`-bJJB>DEi>n4Ndph6V>qZHHLO<yy^?Y}eUe^l5C5P<8ia
z_uKA3sY+8%&t!rv+@{lA&vsr`N=gbUCRAeqZu{XUZ-8SWLvSCd3d-{M$>{}|0OwE=
zzT>1bThnLHhU?OgxR{yKGXTyo8^}4mvC$;_!u`PUH)%aRqTO=RkFvPy)<Puxv#sA>
z@TWo@Zum&o19#rx&dy{A1qpAhpTBr<i4aM|mr#bC7<~wzL7dEHzA`NAN+XcOKe0Jd
zWXC5$bq1yQVMm*rvl>aPTRDn}(bV8-;)(hGqI<TdnTvyrh=^)JfM&UEdh8ZMw|o6s
zsvTK+anaVODKKAF+gElZlkw`7-q*I#!-XsU-do2do%-h;zkmOp(V;=CnrLdG(bz}W
zTnSgf_KFpjl$ZA%DUW<>c~HigF|dMT_+bO*;JkcIyVmEXSjErC`rCi#kmBuj1)`7_
z(Kbxzo-Ih)1ug;^EZ`}<-~w3G<S$mkO)hdS00%Ouzn(^VO^C|RZNFQn{dIiA&r1Xu
z8}eFNX=%(y_K_i)iw5O3<?385DrD%>ucM(&%)2$RaafhGXJk5Z@hNQ*WX1EnqjvP4
zRBo9X{;OwXIds>NUH&3Qj*iLs6M08jq3NDSK%hd+C^TU?FC2D(p1!^eC{nvE1&50B
zpR%*E>H&p^BgZL|_b&uBCeLFV^uT}3mHFt=tam@MpeHIK-1!b{roL4L%gYY0ScSR@
z?I*6c2h&0Wj+MSmrQ-y9(r7m(IkD!~FVSvuP`Jkq`BEZ!G%MC<H*V-v1yyV63^j1a
zt7gJ?-wr-cxd19cot;8*3EiWk1z}+VPud7e-@9CKRY#5->8TO`p(^*`l|5zU<vjB8
zYFk@Mk#XL-z>6wpNzl=Z$Sp1X#AGGzzO*}Ef8)_g&243oy=*S-eu-Annp$SY^fETO
zc`YqBr7H42+SZP=HWk~Jlsy|gObl38&Fs!}OHQf14I=RK1Xe$Es`oP!b@gO5vmcx<
zn7+6*qFqg(?M;d}EE$Mdn@+-Rt+ngG@j*wo8X4`bD=8UNT}M@rt61!b26Z-&xZ+jJ
z{ZX@Ygn5$VG5s(aubG6b$L^k<G}x~d$>Js-B?GU`9_CIo^?3D!wj?qsDKodAy1;oX
zMyScZ<>}Ki-6As5(z&$cn~~+Awsv-xczfLanr==lixB;zmMRVT%SuJvhiLchXUj@U
zdys@JDHI%Ia{GxVH1nYPq6zQ7ebibvQ7h}Zr)Rd>hU@CD3z%xZ>Cq$yM%6hgiLRFO
z@R1`A=B7bGMGp>fwJKExwm)anImHINj_1ndj+i@OFbU&SHk(6&lhhFiL3A`UQW=RB
z&#yIbKiVbM!Kf#zwosakmNN|n^xPBkQ-7G8`1$NLxeaF3NUi?zgz}MYM&<S1dHnM&
zIyGm3dYLD1qA;_u^;Ru%vf8+!;bCp9R~?{p;!AQiYF09+@P$<W<s%z#{_VjKWwQnc
z^_h?S0@|w~viN#f7A^m?C?y?E)aVQzM7Lnm(+33IWn3&?e%>U!&bYlL+>hzWqHi1<
zc{0AX8j_WfF(@b?3%|Z{<x0;eb&_#kC2ga*+2Tx*@XXANAf^8icUf68y|cQ}yy=N%
z#q8|aj5|{HJQrJgdwP1()#C3<J^UJ$Yuk`W4m}TTfnUcRT>6L-!6%kdPLbQ=e%{Bo
zv*dag!Z-(!<|u2MHSx78M42aNK3CT%=@0HpYN|IH3OGFR@uaNqLszK;C#i%$?-4tN
z46<Pq*}T+B=geE*;YNe4zP>)zIcqga;o*Osj7$4ae>gOi)O@K)O>Hb){({@<{^-Z8
zeJ{?4iHe>-H`RL0xu|IBnisZqm2t##no)&({9sU5chE&yOl6z2eRA62%j|&VBFGhz
znsFK|NW&=>Xq(xc4MB^C49Hsu2-~o*uw)k$v=PW<6<p%H5@lhpUt9DaJa`avIoH&-
z*c%%gz0>ll1I2FMb#+Zwo7U0N;yHU(>>hDpFAFbF0$4VEMt7)qd}LhQ8kSsXoU7xP
zb&Fr`z7)Txs3x?l^nzF2S-vQjQ`^O`U4WEBI-vjVWI1@<I|F-)_B7%3$u~EZl|@RA
zA7C-IsFsJ&bvVfFi*cojvvbKcS$bic%!~{UBob94QfDDbBa+_M@CE<8@`^(~dB}7d
z^GaR4NvbFOksH+xIV+?1yfr`uS%kM={(_twXm0HX9kqwk6tt01dS0FpU<>Ic$)4>p
z72XB)^c+X6_uYy}D=xmDB&VjQ_jY!G_2|)2+t>aH=C}Q3i69W7(4FypX4s9<i&egj
zm8lpBtYX=FM}2EWe&MfnG%7$kqAVOl15YsrV4&s}aQpg1D1u5-U?Ed(0orB#PGh;2
z$9-b^2v2&3mvKx|RFvHS<Jv<=oAv8`EZ+|%RZ2|E4>7RHW~ZgyIn1p}=n6a+H+NS_
zDTon2Ugt}ExMTO;pGiaT?zL+Hi)(SQv9~w+61<rL&LlXu^>pWGC<b12B@^MI46vrm
zR_gafzGNqV@a`}4ex`(}!()Q_`m`HM1m)!3Ad9xDVuO3??m`e|fT3Zn0`$+~NX3zn
z1Z-+@^60#Cqcc~(v0n?$R~=nLO^m@7{+tgr*MtXt+Vu7`0fK8;xez`+F=F_ihr{W2
zK^#;Qk>sa2JKM-NDt}X5T>~=SBaq{APZw%qjmI^P&%ctxoM>sU=8q)YB&!=6|5P-x
z6#QefDl}JZm_wR=m;a$dhd>1ce=J%p=H9|ImrTrvq#Uevmuafw#JTeqt#!=hTV+{&
zcc^u;+BEfl<Q$iNxX@0sSCV(Caa*2~^nr0nsLb1KuH~@WcJ-~Kewk@+sfmQ}G2&Ox
zs%}iv;M=t#I)n9e{(&vxVZZ2bacZLZ>u;B%Iy*ZvU0)qKG(w9?+}BVhuGA07-@by1
zp(z~B8;e_7YvE2Rsh5kc38YrZEB<R$&RjV70`>lFTl5dw=+@q8Y-alBig#y;pF`Bu
zr%<7%l@88>_G?A?NB1jNXwIKKs|8j$;n0|^3_ER+Qh{~bv5B80b>8mY^ge8&7O%Uy
zl~@V3!<FUDty1UCl`Ek^#w$(9n49+-tEj2C%VZjG3w+hxYxs9Zq(xpF!+}8Y{fjQb
zpksn8F2C(&;`;kN4cfQA35GT=jn*}mTDW(nd=6YJI52$Ha;&~iZttH1`}2#24xT;7
z-uTAH$ib&N@Zc+mhA&;(bn!J!B^EDFi%A_j2rXwFh3(Ny&+9wvHdFaa%gbj#1-_Iy
zaneEJ2ym0H1@nWBjch?He@%`Owu*cH*4?|smPy#ljFFL36L5KQ-DFukJ!$$O?kAk8
z>_SeO(Q-F~VOpMj`($79E3)vW^R|bn#gAk~vezOfD5h27Og}c#*2ubJ3}VKNbbrn6
zV>o`KgU~!o6(_BGxjjamI`z^-{P^)^j2B~OH@T!rob0YW?o&@A>3x8u%!;V014=y=
ze)iVZC0mqA-bDHQOrL@Ze0h0!)3mj#y<%#rX<JT_vufMPM#4;|Y0Mpk22mT`+U)j;
z*0p||P)LLBhGcGTuGe~%$;gzH?N0xbgnCWC8mh)ytYCwEoEmm|lnV~md;4~ka5igi
zu5)T9YieV{<+sQ8+YS)|zRO*S0I)CFdub~G3=e481y7_kw^VYI*B|jV)Ta~_m^WY5
z{@`PzxO47hl8xs!l`;@WIn3?Lc6(6{r>&telDZ~ezkTnTQV_BH6w^eqhLFR%m7rt8
z(>-1fWtc{6hZZ>B^<yMG1S(D{o>H41urV)a9GmPJTBFxqga$^sOtHSxnT%s^x@~V;
z;+0M=tg8(-3=s$uay!o=z5P-%ef#&LNPDIN|1o`cTce;ymlE7KZqR+4-OBKf8OxJq
zmp`aeezM4SKHVQ)<}e-rIiz^PJpY*o{`DLA(!ej<=>Vi%Z7UW;9huoI>CYKLve!H@
z-Hv|Hzce$`0hL#;+PqLMd-2GG1P9(4tb5Mj&=A9cP3U#`)xGuM!v_k1I##=-VLL(!
znEEEE29nkqK0c3e^AO8-A!mIv*N#AIAu75x{d=5zFC=vRRrXzJ&c7Taez{0RzLjh%
zz2~$z80wWzKg=RXOUt-#nash$TO%M!7~Cp7wC_i|b*cU`8>d{>SQ!U3>%gm53_#aX
z0&YhR_`_&|BCJq=BZL}sUDsInv|U_EjWHVma=3@Oe4E4#a=HGGg<D^Y{mhxy1%0>w
z!Uhxr>4lyq9g~e6+8P6+1Tc7hFirUNRU;y@Yz^H`5pA3YhC`}a^kt=HM+o6(oEW#t
zmxspp-CnA17)m-?LHcDK<DWoP($X@kpy=A?Jw8RcyHk+;^_ad8C{iblVy#(UGw0U(
z8XGTJju_O_WD<@N3)7*^KMCDPNh~>h$LSo0tW<aDGRF+#@X!#%lc1+FbkLCtyurDu
zLaql-2ijxwf=*X*`GuOdZ`2TJ4f&%_zHhNQHcy>k8h!dShHS^czz}6R1v0~zfy&$s
zV+!KU8J5tcYfL`D#`d<FIEqGA_=2;1;h$etr8OX+&Vh)D>9M%)_OG_WFXN}LvxdmB
z#l%FGDc*`Q9N4N5G8JZ+Xel_zDbtbJdIIKb;#NVd%Hr3~RL{(Tb~}96C2_s=<i?)C
z!7kIud(0hd930lttUYZpBmXsVja5|2tgNlown%hzA%tK;iwt&w9RHF$oZPTGVAnhO
ze-WnMH$VvF?|bgt!x**Z8ru0P+T6<4wzj)&Zc%40z#f=--OQpV>vno3qt4Bnv6DZW
zpx09wOjIfibssjTT#IHe=U`{o)Q!QfY*sn5u$B`S1~4u7k%XL_o6v{jYRAINJOlO!
zIXL_yh{`{I@~Qga)?cX0g-`DH_Z@|V)1u?uht*>3;ZIgYnJ%X+ro+|xX5l~OFkl*i
zU~2Z8(;^X3mkgDazh(r?9t=_hA>~|9Fwf*eJHv#9BMxSN?4?CRWXoui#_!hHnx3BC
z7$ibtf>r;){cP`c?YZK`d#|gFC~T#9eY#vrLf`$*Kf}Bz>|l39pKP{&|8q+5$g+~r
z>$IOguYeUaT6+HD^7v^nr(dkESmo|!Th2x$`$H3dS2Gv(uAZK9lGnqi=;&AibiZwB
z1|9x0jA4jB`WD2wZLz*e-rhAiIXR*>{n3=r{fFB+VdaXtE&S0~1U=ld+xWb^<D?d7
z4j<+ex?g(c0+1&Qzl=;e&Hng6!Bo=&<^e;#5|NZ@q$r#RWYd{o0l76v8)#9<^Dmd5
zWHw_Lr?%pUaVSn{TU))iLeB)wpT7Z&@nZV7g<(;bQq+j}x%v4?rz(0|XB(Txi)#QP
z)zQ3)h>C5bM|&^s4W;CWC~Ik@gB7QA1#r4Bz6?ZPVB~b_iS-$lSp{4Vt<QBPhuw;r
zf&b1!dJoOyA0FGUb7*7Un>60nGB$oVzy0acFFD8K+Q}o1j?cr~27K*Y7Tq_*A5~Hl
z6R{FsRnI%>7?IC$H|2eYSf)&>zOchNMgxE&a0bi)Ya+M4U_gEtxa4kTXIo~p`xKAW
z-1~3}9G%PCN7NqiH;8nCJ}sb7!)=Rz>E4h!WY{Ohn`<rTbM0Ey;NYMXx$w;!^@KI)
zuU{_&;@Vs0hCVDmVr7I9tJO6na$gYN#fz>({35Srcb0>=z4DIbO<~|>YZ6+;qn;2w
zFXsxW`1qtO-digz9luo2*znhO-}PLutzg%5+$GzNYS-NM&GHtE@xZvlrYP27HIdNA
z4Y@q?zZx|jU4zcsbrDG6YaP)qE!;oUxZHQNaU*b=nJ4XA-w!)snzDvVx5}6xZ^}Ui
z2Cauv9*biQxaoOEiDR*%v&S0iK@`SIMoz5vnB2xn^F_+tzR5{5U|RW16ADcnF+Vx8
z3JQe(KwVdA-gKe9KB>5y<avNDWUg0dr`;ZlHt@bZRE_~EdHw4%0Z*S=jDHMv1>J9s
zkk&7(r-K?zpwi#d17x0q7T;ou639pSYj1#?f!Oe#u=TC!IIj(|0H2sZsmhHTcOU^@
z#5phqI9C~#x4WWeIQ|q?fF(6IGgIj5d;k7jEIO5Z$^iW_I?uRa-kSKZrt`4t2O|ic
zLHZyMVlj@vamX^tPco^79p%+c1FOg?HCd7Qxw+dW21}28N6(yL#fJt4l1d8jj>|vf
zpp~t`*&CGA!qUM0k}YJY#@&6|Pe)su^=KU9adx=&WRNvwYs=2bDIM`$k7{Y5Q`CKe
zO}@Wm@=d$_9fE(h6AgwNw~ieQx}vDqJ2+@HzrDGsVZEai@=b8qU_@C(1;0kAiHdrt
zsPIAn<1KB%roCu<_il^cA(XDVI!NiM%0_^go#DZt#zJh?d9-<We7s`ISIHi>8RxF&
zi&&WVmNdU+Sn?9NA+;%=R=j(+i~Pw|B0*Krq3`*0AZ1$n?%kUWRL(t)6lyGX9|J>~
z>{Qq{d4eN&+qAAEIv$%h;5v8VtIR<j9-h@?V`e~1`k55`zKfx|q0Yh3{5{UyH;Ep#
zu(&FHcww~eI}?ia(4k~Fo4P9ttpR(UoSwdL`gC^(_Pl_ASdT57*@{6VH$k5hO^RGT
z%c_h%suLm(Agm|%eJG(t<kHELoo=XmusP#QV<C4jjRkS!dDu7r!{_$%e<$9WT`|q3
zTJF8Ff^M@sdoClM**3CQHZ~^4CT3{;oRpVE1@QnX{_DRKKKAj_B7w{;NU-1pE_Gdi
z;N|v7-O0(!dfl&+P8Tj(XHu7g#@<rhat^d+sz~d=tO>+`dc>N?cFMJ2h9Q92VFZ?M
z>D5GQLDgZgI9io=GvwvVh3zEl$uo(X+EFzlhdbG&dW`q|cy{Qt%7=62u>^u!zTVm+
zXpMfqUIAN<Y+{Aeq<7%ruU|(%pdR;=x-b&30M2?D80YCkd-Aq&cv~lUw7wkotLGIi
z^V)eUGTkpFe&)fue3SwJzp&ShZvyO@G&fBl%G-D>4%v}I<p%8Ht&Em43I)+X$2bkg
zrN{!lI;&CuSTk<kOWz7HcF?EN6p~=kucNN++qWSLiWW<5Xr&AAxuA&JTZJtv(`pXs
zWet(`62&dDiQatsw&_kU;H`wMd3VMGpsjKTwwZiqAg!phAKJmF?v%@G2hV^#$GsZ<
zf!T}tWjoPms+Ix%4Fpi7rR#s8x_dCt)qStV9(s}^G^~i%L)$<Y*sZP}+ywnc8fA@W
zp&=1kDyquc(S<*Dx0;U*OhJ`S8^Ujz(HR^7l`7<i?XfT><-M^I|HTE^fB4+STkGuH
zTrnH9c#n`pXDC&5;u~72K9r?LY>7{Ug5sLKYJaF(n&{u$`~zf$2dOg7Q>^m}1_p5u
zVybSD;82?7+Sv?WT?>tEqQj`8FE&tTKn^2=>-Cp!$IRI$s)F2W?7>6h@<el7^MKnP
z5${_tQ>mnQ2pu*>8Gp)g&g5igce-$aT}eA(9$xvO&+*l(SAmOA0J|V6`mJwTerG$_
zt1h1OQRWG`<iY0hAvsJFq|R&w_+N}N>#lukEeC9qlET6=;B4T4F&;}oy~E!BC-?h=
z1I?X3P#q0`B+ah2HsqMK8WX)1z((DCQ0MMln|`1h?Fc;$$ur!lH`CSBfo$K(UcTV<
zYXPp)ZhK~i`3x-#Uq?f_t)lWOs+oqC*1GG=#C<%(%NquITv9GSB3g~Zd^a1DcrINk
zXf2zZh0=rjU{Y>cT1P29C%2$`hcdQi++MfR<Tvk5^wA%5p!}dEvJ#*rAeHCBg*ifP
zf^@|!9IUJahU4rLLbVqK1a!*E%3i!6ITevyaU%~TpleD2LhCwxPWV5NXJb-Q8|X{p
z#H>Sr=yKd3X%X-wA)5+-3T+pKhVWpMW;5tMV5T#W6O7(!=`BB+MIy5Uyz`A|?$D7V
zX@GVjy<LxSIMo|BgnjsxdCq@fyiqfbtzK^AqH12akR9l@33oBHXbnkSPG#i{fCd+a
z#UI>wkYuA+Ttc*HdZ`!K?zvP|Qsz284fpmdtd*f%N?FQF6rVTm4LZ5H{L!sUJTi8}
z9)NPQE@`=glj_}vQ<ZItMW)=bN8=GNa1Dpnw<<7&K)Ei_k2)Z?F}&g4kX}1n`;7WC
zINE|j63amCa}Q?m`>YwAHxzZW7l&gT46m&8fPT+D7tE4f{T2r$#ZSlBI3q3XSKA^$
z=T=L@dr9lv8zYG<e+u7WF|O?I^FDIq7suQvU}_skCG3O0wy;R^tUPtXI}ih!#?L0#
z8n6R(-a!R*g!#a7uwf~HMoxpeM2<iI1n;2gZ@}Yr(WeniU;w3XOFm<tt%k&aTY$XZ
z0Djgz!4TiZNvG`e^lK(2XqvqMj9pe&?=)_f1BgJZw7V|9xcKAp@P0<FG}wSFTBE+h
zg&jRw06fhNGQL<Iy;FwsHG-BUv~egnM_;@xKdP?%(057ym1zU1mt*7O0lyUzCxFBe
ziFOM?HMBqZ^qkW9YnQv)7DGY~Qr0uwJux74<qo)`N3^-s*fuw}U-a0(`&pNq+S=Ru
z_oD+NRAK~`;R6_)_b#2x1C+pZqZj9H7s@GnT}Y^rzIkD+A+sIr2Mbd+xv1!Jetv#n
z;ia0z&gay%vRHBaw%yR<rl#xHu3mMq3uTW?hMl*rFZi&lWo3T5<L2^Zl?16e=b>>2
z3xI2DLx#XolO5oULbV7D`*x9IGL`KeOAzf}5OI!&9#{OvaABb!$eV)Re~mi&o)}if
zb<PDSSVQGg@9itckG6V33$ER>e@gYC{2Y+=E24T9B_Js|88HfmKYKF*!j_<)!AkcG
zpR%iK85}5r3({`iDrYR`dYtR({Xl?+hF&nxLyu2CT$Q()a7I|TOOpmTr7IrWuzxZH
zx1E7>LXI%xuCJw)4JUm@ap=o+PA4%?l-JnuKHxU1Uq3RUW>D@^07Kna4=Ef#O8G-L
zq<#ybBiU$#hyM~SXB%u@^PWa5DZZXbZd}GCb|X1<JD><WC#Qan3sXAm(mw3eDz1{e
zYpG4vz5HaMN*FNatvzj^1U5O}+s7%g_c^3>x*%VwUV(?IV9HvXK|gna&_(NLc6RpL
zi@_CAqW2V@*)>pVGAKa0wNw~n@ax@6oW7#3U!DK1Y1zS)ymaBr*Y3I_=ONt`S*(Fd
z<&i@|X+vvJ=Z6-F&%kM0Y%Y7K^5dwqcMbQR&oDUvDJ{f*JRl(AgC!H*?%^mdc4IH+
zR*lbFUcMZN``#+uHJzjg$(#=C_9p0uQxX~m6Ly28&T3Uy91EEbexRb@nmd+Uz4^1X
zwlDnvf8{5FD=(T_ZaKDC;im(&m5Cy(C$Op69^W8c*=f_@^7tMLFgf_6-^AK>F^CV}
z&$W$81BzX@#L9%jOsuuty4>Yo$RFw-_T!*mPvGOu8KC1RLxELTcF%~SLw+mqp~hB$
zLB&)a=U4&k)xc6f6NlGi!CtXD!)wpFYm#66*HZjEx*>na*AmLXV4PIm?Q3su>V?iT
zBEPX5gDu~BE;z19Rot&z)US)>?Ai3hA{-ZBY;fYZd4KCj7J{~*M<z+FlU*QX!b|F#
za$ErLp^l)esHo`L$~Pvw=to}EVHi>hWhZ+=Tm!Ohr9z{}?$3#Mv4fm{>*kY&R;>8E
z@`=T<B-?&YF`n)YdH(YfR+6DT!^1sQ39ny+Rftmct16POpwBy4bRT5nxi4K(1yaTL
zc~1oVC`0b}(s6S!F28P-3fG~fK!~yOZY4Gc*vCF*ZinJR{c0rE%Z3bo+cbQ-4wsWI
zWF96y+lbc%u7DibCKWgU4CIACT4Tr0t{Hge?u=KI46YeDEU$9KD9IL!c>-eGtiETi
zg#n<?>$koe)kgC#8I?`0UH&MC7qM}#4(P+3L;w6!yLLw?qkyJkyOxDTRy+PUoFm|T
zbZ4STrF5GNaUFC<`_@=CXuZ2>2PJejK$(z@%5H3@>lRj&&rsUKp}_=h&C_f7L-Tqr
znxY*lODF}UaXYVsy$4=CGJ#2|Vsg1@LO|385_Nd=U$J9r#b)*~E!0tOuAVG)Hcl`^
zIhF}g-Ok$r+vzr2&ZYE+t@sWN!OPy>adH%w1j`*Gu+OThl!5FQxUa#mrCU>q3tU}X
zVjlA#LwEfpYp?C`s@0ZxdNL%9nmRhTMQ>nBU)PXbBuTpAmpBfDRoIe0mijwGdV~Nq
z`ZTPP#}4utdL-M`u4s3UU9uIXVM)&n?T{sIUjg3(X^;WfL8fnE77I3xVC48&ta_<B
zj#nPxNcD}l@APCcN%$G3J~(&}#HhRA`f|6{1PZrh9359c@Ggl*N@}pM0XAzm*mqeX
zRTS7BOr@qnq<uRUiQ#YFSketa4l=V=cVwTdt80e2CfLLHQrFO)^rcYWiCU^7MrQ<k
zKvw=pwCq=mBRO7jP3)e+jU)?qU>nd_W@NB8?k6sZ3Alk~iVj#>OqY{oK@|K!^;A9S
zSTSAFR-3yoNYzd0Cpv#-#?4K|H5^)QpTqmMcBNzA65znAs;6%FRoF~GRXGL0T-A2T
zK+32EMat|~J5AzLjj_$9<FO*sG5~y7e|)NpP$d8vXN+5F9_8h>$NUHjJEh@p1G#Qe
zchK$2d%B*#dx`fYHbbXQ;Nm<)J7NLW(A%p~F}$i0`av3&RrOk1jmoYd?e>oP1qv}*
zZ!~pmdupeomax2hcvo0=1{=8p_MoWbLnu;csGL{3XgQ>}sWo`&Td+aA-OSCMIR}2y
zeNf+$Ylz0e`Um~9n8z`VjkL2=GMD!K`^B@Hpris_aP6XY+fU`T>PpMl$Xx(e&R+VX
zq5-|5B0iD<UDv}CF?01~PSK5UaCa>rk-S=+wXv6i-uMw~<iQ6vm@gFgEzpd#a}!)g
zG9+b)^&g?PO=WtA+%Q%EfvRV1{f8%~Z&OT&KS=P`S@6?Ew0N_dIlcA4%Sx7RKU@FB
zu^{>X>=~nVBZbEgA2zKF%6~krHjI`G^fkwE@i<5&P|g`%L}0%{$BE_)hbl;{qnafJ
zl)($Gd^=Bj*A!^vU8<u3I<+yuHD=G&!Op^h1*en-71ysrh9O#lzf!KT%qz*0s`x8^
z+()J_EGPZiO(&qHDZ(-D(^?fddY;?f`TnCAbND($OKoU6v<oJA$`EQBM#8YfoI_sG
z*Ei9US|U&qs{=Sy8uB<nXv9`Z4q0zdYq6`EjLT>Mztge*OBc%aLj?cM%&4vXREj4I
zHKYQAtG7q<R@jRds~dyX0&dj0`ub5OPAF8TLz~u>$Vg@@d;91!5I5iAIWIA{f-x{K
zK-`G{2>`ciRnV<HFD|YmCe{m*-(6qcr1G(JLxiYDQ<bM%bQ=tWM0xKT7XP{l?V@vy
zjM2GJ0|lrSa;1ovm^`SZ+y#ejVN6C#%ZoOI4`SrKh?8dd2x#woltF!VUS2}r-p!>0
zU*Tx<phttTr}o`2M@J&?5Vxta(NRZ1rDG4f$U~dy`i_n}NDVkLp-u@D^l_c3RXaRM
zXTB#jd|8(~YYE4mjBy<KzMFEaw0k}9|8rlwaH;|hL0Q=x*aysPlR>vj)Q@_q@qQzq
z%_A<|w)(}ttd7gZ=Jxd+MS`cZXTLLv>KPd=c0X>d{{i7rUw(yet3&?SR@=y6u~~^W
zmin%w4KDm5gjofZKlML1bF&&xK=~ev@BU5Rv23Due*JT4WJuOG=+Tr@)q2atolJY5
z33&#xsp*8v4uvr{FHaMQggIEOmXA*uM96x9hBm;}3u5F@94cs_PPG*yD1NQyG@_vy
zDCiFe54@-6$P{#FdP1{u;Og3%CJ+^X4hfjB_*0Aix}9y$S7E?arU5;#F$V_Vhr!k`
z@7j4SIvY~#YuC1*0;yv)=K%9jur3hzL9iqY6%cY{0F;Y!a&rM4(44MEU<+7;J+xf4
zxe)8-rlwAy+w*Vm>APfu7~efoEz}9*#%?`YZQ>A^<(Bt+-*FVq%#P#k+X}tCy*#|%
z5dOre)2SdJ`S5&jIHdL9`!K&vk~GkdW#*)sy}y3tN(!gvF91Nb+z5w3pTr($ISd}a
z+h6Pe$I|;-73JlZv~+azsEg1!0TlcflVdUgitE>4)%C#(av<?wpBsaqCgpQ5c830J
z2$%&xny2Wk3BYJh5T$JFuAyO8s*<yq&*qIrD)`|*-^B%()H!o=JOM!nZ6GZrr9SVL
zb~}UGsMoxf23bHE3etT53jxppLV<7qsbeF<N92}aSDsy}@w4&(ZQ?s4t~d<9%J4NI
zj~^d<5vr!?<aE>AA)$K~9!2;`!O!98x6n97KaZs3P<humdb0;FdkKq47h&BnGczNe
z1`ntH0OW1#$ZOo-U=E}&OFEb)faswts(Rq4;k|x&laFU8b2@6kbh!gnc9^+PqXPJ%
z*z80r5R&@MNf?x>3UdB#J*Wd~st5f^5fORdIAjQEbWYa!@FQsu@UZT_gE=me)Dknw
zax1z%LmI!GJX^Jr%0;=&46S<Y?MOQT&}SoKVtNJ&BokC&ap;AFd)+cK3rI#oEo%M8
zlhB;<a&5@K6WZ7E4dn4SoS)N@Y8ZdL$Mc76@tMQJjgU$s8$P=jk0M~eQ4>F)d3ANO
zItf#*USghPJ{RpXc~J*cr4DGpvxtqgVmQW{Qd)W_<K9>}eg*a)-Iv$&OMzssIOE{4
zd4jS%-OvTzWS|#F19YDqYhJNCU~1hBhBPK5lW^d9vy}@}-YXIoZgR29%w)uwMT4fS
zD=8TE@``!occ3rxb=Jj;zO;lcP~H)}u-+dkz{@)$-X5j!Do8aNCVLPUKTb=>$UJr}
zR?@iubSAQghmVPgi2?Yp3RQ)^&6UF{Cj&h_tKi0p<K>}aEt0?H8><65SJFFVe1V$D
zbMfMv*2$jb@l>c2<F*E2%ZzeuZGmncD<B<ZINpTk1SwfAXFGX&O$CnVT4O$L>AyC4
zu*ohv%2)l#!43j7FgZ1`9asfD&4amsGypf?<}HrofCB=euf*$Q<4C6fY6M)W=E5h?
znq>t=Of1Z}j8vsHsu=E=HHjD=4rXa7tE<9Neg7zWqEHPdK~G!tjn=z}Gay{%%75m#
zL`S8?d2!<F3>6XDU{|B{hs;tvy-|E|u5FSU(xJC*-@Xgza>X>@s^Iw|&%2|oqmv0e
zX=+dkv+S3D_^rR~PQ=ntw`xOv%2s<jE8!IYM=m~)@4*bx($qY!3{#+y$?1$T>{RO>
z3`-{b5L!k?mWiAg+dxxSX~Fl(o#CWV*YgvHh=NxyCizxhw(j%!wStEbEb#L<H|(VD
zz7>F9ELQ-7gU^T*3o54Py63@|?4p!cY!I378upMQhedMHy%o^#3fX7?@|6y1fJEv*
zg>}O#3Fxge;39v2z7FA13!@ws2emLcw-Iek7W8)9NqSYOB0-r87Y2m0vT{>WuGEp{
z4n$2?Llk38XX`x~={EzWp3i~C5HtAx+c!tfhM-V6{en2V>U>;5k#)^xk4ETxvpluR
za@_Ii)u(_Dz608Z3z-De+q{$8qD+f{4RarZ1*j_Sqg#rNr>6S*B`8A;n3^@QCyyWB
z4vtsTFZyZJ_*fUcl&&D*mUkWS&QwxosIQ%_E}t^QGRAw1k?gZw%I{0Nd=9V>;}VmM
z@JI=Ucr#8zHwFtiarZ}ZxZm1?_QV9vJt+6Z!BP7}#pB11driEGb^%!}!QLlXS?5D>
z9y1+}{Ao}$DPyaH);m2A0h`ZNJPi!w0VsPl9&~BJF{>sj**9@;2a;fIVC=ffl$$RB
znMjeD*{pmwilU|JMta}%{Ksp6+{6Oz#^>P^cMFaB`MsS2-1H)<u(I-wAE|q1Mt*0F
z9N2yYFmsr?tNN<8wzkl|jn0LAYwT4wv|Xw|MI@#LP+))He&`00+{zp$s{LPypf+(p
z83wK03+z&&O`?6OYFq{D>*G<*#{}xu#W6c%`67y3rf>%FGh*#xjXMa&X5ZI`pM|O|
z_qXd7{X7nbeU{o@6sN>%+pYLlFJ8>iw>WVrtvAnO3kvR<nN<N$G3bfW$ZUgVf01fg
z``#R8INs*neDTmmi3{~zckXsox_Z^)Sg^b7PI@$TX+<`QAEO1{=i=XR&|P5lHSA*9
zgRhYZ#G*_`6Ce^_kO7gN*^CJ=Cmgv*O!}R4-fIrr8?|T-IeShHk1PQ%`?YOJ9?D?s
zj2lm3YuAR3jqZ3qC#M%?sO*~J;=7PIYjEz=+l|~*N%Aeo=7&TFT%<0DiG6PrA>hGw
z&fC^V5h`?`P|~nY!S8%po;WoUdbR{<@*Si@t?Nh*Bpg2QNk$QhKEC9k9VFcu77THL
zLYAy|!7OcTUhVS7H9!iq{K6qP+S#5)OHW^_A#i~gVI7SVCxkd~Jf$l#{BzS-zKB#9
zGBb*cuYhsU%4|He0~x{8%G{_&CKwP5w9xkUMV8La;fWqUah!V&oVA3S@A|0sEm?Wq
z>is+3lnoZ3b(;4hNT^ibUx-JVvv=p-U<N;VfKP#kD&rd%{z01?*aVc)qaEarvo3S(
ze!kbie~K_G1N+@84jj@!P{&Dzo)yw|)g^nXCNj(V>ocKk;T=rX>(DMwDF%b!;qDQB
zI)Y0QV5J~v<(ms7CIdW_HqSzfN40$Z()?&SF!7PitY_4BICBlE2H7C!NX(D|js;Sv
zl0tY^85lS*y|!0^Gz|=_=VhUKzP>rJ0}rIhxUQ)ngv%ZWaMjPXQ+<HPQ7HI!*P#MZ
z2~wX1b+Ar^2Phj=(m1}%y1M+CB@U?^s%;t5MZj4uyU}BcV8&|Gp!=)>J845p>n#eE
zZOmgL-CuS{_1fh}t{q@do``Q=Sm14?z;0QCSt4FTWNN|AFByU#gJv$7N;I;$gmB4o
zcC^ppeQ!bCl@qgmIdoT6-{Ov6F0_(lwmXA%4`oVxCm+sN0oR(Fep{_ObKPpVi)S9(
z!$yTC$So_|*KNFjx&56$uHT^wLw&a|)7KDc6%;BlbfDf`Ehj&}w_8nqsceB<Trui(
z4MFU(RbVOiLa`wNS;RCo@7YqI(1O6GgAD>hgpzTjE9tvqzatN%dbLogFT4M_raTl4
zdt5%cVXAccofk;;a`-HT5^?i8P*uo*eQan6y}g#?2Rg1?9<t@ou%srt5!3!*4vI+N
zb%F-{<Kvv6U|P^O5xP^+jL)jMvk7YkIdb$v8i!rQqX^=DQD}H73M-;qokoH_K$>i>
zTFA?z9;WB|vT{dFw}x=KjxZ>XkrRM;3zR=RDr_xasUTB!u&R5MIPD^}(JU{Q{_&$v
z5@`k!8L#zDT2S}fg>By^j-fOBwkOo07B$^*UEPzvTK@ug=H}+s`%M{<fr2xr8`<Fj
zQ(3COd;rh98OZo@)lBch>;+&=1G*)jP7?pcLRU~@S2%={=-&GCk}J5_BJ>tHDpZdV
zLbuC!K(ytT*C#VN(job1bh~w{1o(5iMjRUXkhsdk#6%9QcIWjiI4Qk0$7x+=)1&8W
z*ZA)MA~ahGhvnq2V_ndO)wnL1mxqRa1DHW#I3E=ty+mO>5n?5HUuFT9u7W-+r=S1~
zTJ&Ni9E;Nq2WRwQ(L+_N2;cJ6aq&@yHl*=k(-+>DQH&&`YLk7Vqi%!5E@(wVI*YJ-
z4;)2eXwKFwcyhqX?}O|hH6!Dk0Tx=54pLS^)n*5+8w!#YO+_8v)uG}*ad-~gV!LcB
zD4BOPx_LvhVV(tX)#pMmxuc_3TGRXHT<At}?$p%vP@MJjhH5lmfRK;G17ws94Pxs1
z_k+RK%5bEmg#~D9Tm-vd?hJ*7rQ0!r1Deq_HS!~Rb<y^Vca$n{lXjp@KL`~C$W9PK
zZVG^^obot0IyN9f$*!($nV3h;Jkp$w{mgJ1(%9s$4t4ubInpgi|HMVXOS1Jx6)Zc5
z!nF~RR0ywUsn*uk44Y!?LxFCTaYnWCCr>Kt7`Y}ursgSAUR0zG)d)m>*+xK{poCO%
zUPrrMg{J4wqXP9;z>&4{$A>31lw$(}-laZU2AnKRLsikcjnL4xvN4aAe+NaGnU;%K
zEy#qLO`*pGdC^E9AK{nC)Pn?MIm|V2*lT%__90|N)A!fyq5rj{MD+fr8{O18Z&?8v
zdrM1oXkP+u4n6q*-KtHm8qv3BRt77BkwZf)JPUlM9%Ssz^lorpG1bY_%>arIbzaKL
z{6nQYnGYruY0=&<ox`qD4^sElekvB`4+L;M&~5V~gmZ394A`)9Z<KtqkyZx|arKF2
zHBHT)JH5dEh18Xn@gXGm7Sk&r`k6s>IMMpmfUAE5#sdlV<Ls#!z`QJynSz|SZmlgY
z0XJ*?THVsJ2&5%5A^Hvh>t8ICkh<-NUc$GltE#@*yWZPcP1mm@DFOf%Fx8fTFRFtF
zpaJZsQJ*!l-JJd+cVIeGNfkT2fCC{pt$z6$(0xExqJxYV=q)l8OCVPh8f(iK>qBNo
z$f0gcEL?uIKqcO)hC-moMt(IxD@wpGSL9c1>O>{3KE=Cc=~h-p_RAf=wYZ%w$PBPw
z!!yB7;Bq;+hFa~52myw{oCFiw+zT2R^H8VKc<>-%lA@=tp8~;oklLdOIFLvaTuGpd
z{<xs_rxcv|$wMnYxRdg5v0_~PUW?E?Lm}Z9Er1DF{VNQ6o`+}9^h@oT$cQ8J04oq!
z-8QM@*7Z6(rE*Pjcz8ICfunETDrpowIqln!a1cEY#<IsV)qTIqVai8pDrSpY`Ne^|
z(m*ckMF=IN^|u+m&=2xf4a`DqBSuzIH!yeugQHon7xq_gID_k{!rByH$4fS6nerqU
zs~|?M9%+27rF7mHoW2nDWI!4R;0I5u-@HSW;b4_>E;NK@!=A^RROB|d0NdM3=vRk6
zeO9D*0<t{tNz{Z4iH^>x%-vplx}?X-#*DdTsoiPS%vX$QjUE~?N#E_M1~6H=Jf{<|
zNN<^~H-rs<ncPY8DJ~fD{FHc%<<cb*eybMt4MepHF0tn`i@=J+*sN2P%eqCPF%YDZ
z8vp!PyS{|hWteUJFLp^ttHdk=18!l#hAu6X^jW~yR`*P;Nn^8q{Wf2tkh1axBxeR6
z4QOz1-CW)!CN7@TM}|W3MIj+QD7Hc#u3>BY3f3Z|RfAQ!?Qv;oM?Qa|*HCS{+<1T3
zbM5FH0L%-+ZdHb)Ndf#y<vk+cXSqeD4fOPR+1Y)kL$`}@4RP!1hX4sfdaEE<07dZZ
zo4111Y8KSAz&RUsv2>HhpU}sX_Tq&wJn-|Ohg$!O3y@n*=w~yKzoOU(UKBadm=+Mk
zh_oC)<OUZswYGaIynZdA28eGKLqv1*VK%nx&CRQyKc78+e&%Y78W4rpIXG+@5M^SZ
z#Ax2Vn+C_f!L-D&gRg#<48<(&JcW={Q(qrCfasETv+i+yl}OLZlmcl9fK}&(g>M3F
zA4+)eFfBt3gBqa3)f0g9@^Bml-7Zl8mb0s>^dKDoL_x>ZH8OuyBGUW9YsimypwR%B
zdZ0a82yH8_3%aiWha#yYDB<OvKyaK71xsd7{|03@W)_ygCGLa^l%oJ3f^#U6XCoG*
zT3P`w{%Q%dl;$n7PH<sd0bHx_c(EsCqr!r)P?azQ{3~R0VqSJy?V%;~8D{`~3Z)_`
z-&&*e^s_wt{8E#bhQk5hy>Qwz4}hj$PF0#Z?zhjL{aik@LFJY5$^u@YsLKpOm(hd*
zePncWHguHHEFOVasXfQqt+m~kpqTWy(PuuDp#!A8decMsL5YzV6KCT4#hja5{^m_5
zg3MW3J_q4Tmu(O4hUySF+7SMuVo+07U7ZSYA;2Xl+j>?)A=%e&T~di7m=%J0O13Yt
zCP-zXzcW=ty7?{Wy37;_g*A@fv9XDVFdV>EJ_r{~n{!~J>|wL=tTtVSX0i0Nw3||g
z@_bkQ+~!mPxQBEpD?R<QDN5UZ)qQLHTVMD@vcj`huQa?!&)T>^bN;-Bo}OjsH!kk8
z>E|z8&{J1e)Iy_k0r&@$cJtVMe&y%SzXra39~dYF5bcnZ`}XE@QeVZ=LYKYE?5KAG
z*RqpTq-2r8cacAUUIC>S*z$9Lp9$SSS;fVFMn*<%)X2TToBsR&wg<@e_V@{H7W9Gl
z_G$roBt6mm3H5%M>7QJ@cX&34bQE^FT*rr$!7c|GpibiK%nWeb9=&)$r@AF3gDHSW
zg00*c`X&QYpFVwh9xzmsF*rC#pWNRhCE+rU@`D<NHPHFZwJ;X8ww-W{ga79^r)OP6
zgr?$VQU$q00CG8m$q0Hg9xYfn%D+tqG^l23!2TwaPh|Kd=H+zCCA;6=M1g804o);T
zxR2fdVjJAql^VCbOU86*1OgN)`^Fa_8Azd!$?eWK^kQiD>_QQN`{YS=_YqgD$ruaT
zrjNtE)?$7ecyO%c7kOH|)8kds?TsOHfVw`#mrGPk%o3tjbF&0lx4b~6Bu;HZ!+tiJ
zv&u-<U>${!D_h^;{oa39H8cXojdDmZo8KJ6W@J>W(bzasMnX;9L7*xc=O&equxpvh
z@dPhBS#N*qRxniV$IKfz{Gz$qY-A-l>7ItK$xu7Ocdk1UN8}?L#|2BtZhlM_gQa>I
zLU-&Vy0gDM-)oha3~?Emn3OPn1wcDWPTOt;^uJt`-p?Z75YruCA^?D8-VbVeR-w)9
ziI~Kb>m9&;MY4|*ofE+5gYvg`1_k1QG%)nr=MNDx^i1j8_!6zbJe??g3z7tNVBl6v
zx5ZW50Ul@|<WgHlcz!4WxT6ZxK<jD3x3|uspnl+ACyrXz(v~0Hg(}2CNdRbD164?;
z8d9Avx1-b!twC`gTt(;`>vMAG=#HRJ@+SWz6#ZCd0+TYzZ9nwY1*fV~t6tiKq2tF@
z&CKyD9zGCOjBn1(-2_&*!|5NTkicE!;n9cCnO)wuxGCf~7B~=%LJ;jsIh=_5xEpms
z0g0r{T1wk&VPoQ=%$UQmVT++|or4A^wh%7C6IT(244m2Rg$?=nDgZhsE9{a-kbkJ2
zCIdD@yN+Qz)}IM_e`|Xom5xt_DEr<%R74sUvp6Q|vw1$>nDPkdT5sFlirYVe3V~EN
z)vR^&ox(2E^5K8=DX20+?bqKQs9Ajgia>4voGy@AII%Z~lL(=KE|lk>&D~~T{s@fC
zu5}1$!MtWa7<?@bPdiAs0KMd|*aU(>cJ{fm%AK8xAjEgC)qg?9cq`}vFOx#MLG`+r
zk@I)l?(z=u`$rgk_$wVJ7)R2VW5`FpC)C^l{<|V-8rl`$fn@?a9QKTC*yCUqWEXz$
zY*GdfG9%Eg9<h5b>V4?H_=ytWUbh>C($y`S+XIgz`2@_EcaWUOf?NX$ik;xsb~&&C
z+=(toN$EpJ(nx(1sKbEoh#lSGeg2RzQzixcI$*xIjC!)1mz2~x`ZhlE^CZ;E4{Shx
zZ>d@9L%QP%Ni03x3@1_X0aOxBeg+DAcde{qXYBzy1(x3oVH-{(@K?Kd<O~Ys+w@QS
zu=m-gVd9h6GS?&mP@C$CicbK}%7*C|{}H_BSR$ajq|@M~05$Azc*X@#o-&w*0>u0)
zapRuxM%oKkPrL^+sc*Y&P@B<!#L?|SscOJVP4p!>8hMPTSO0h%e0$eQVrf~~ER;_z
zyE7P$oPvk->7Uo(kADm#5yK;U9Nc0BO|DG)nVXwyoWN*azn($E81niI)Ty9fQ3>M8
zBlHfjNCU~qlY6A+wf_?w=;>V^N1-~D;G~C^IMK7*nQ*9TLoBGFsTlzU38aJr$14Oj
z5s-}l(>?t?YF!#*Vi&k|^2hp_bLTFeJXz!{4b8-`9FEYV*53iO+hTp@HgfLA#OQ)~
zkL8c|cf>AT%Bs$}$s9S!!^a1Trf8;5bSM;w`JbN365b5&_MzU{OT%o1VFjzEq`Q#*
zt~<hBjHIG%2}9@U;d;3vqmBaiHs&#`ZK$oM0r}_1zfJWdOeN04H2NQYwnI@0|HH3Q
zsNMem{{_eZ{r_?JJx%@}jl&OKDDj^EJ)`}N`{JBMzcK#KUe@`i%>Vn0l_0}W7XLY3
zl{?_~FFIPioI_xJ{`EKi(a+nkV*dVP&b1r$s6^MBywbMADdQoy_xBoMI$<<@zq+mS
z5B9bH^ld)E>HPC-QNV*bkVNot`BBy1pO0F93}Le?)!n|WQ&9f*6*GBY%>H@ct{?pC
zOMw6|?dMLBKZ;0PZtg6MczS4V)X6Wa1=@ToRAjoW@JGJBqy5Mo_2HbKA#^_rdI??z
zSZ2q3SL?FAzI-e1vOa^{6l435oczAQoA?whvSP5Vdc<9Ylm3rhzuq7Qojup4yibVj
z&s8s3HBNIm^S6>o&TZ}=iC=5?`h#zcQprj5&^8l%x5AR`m%p(T?=`|8j`YWhS+jGR
z3$rmGgWZo}Z|}7Eg1hwBZN2v9aQfR#^$Y%ix+1O((fNL4Y&jIbTeES3K~l-o7s2aJ
z5T#oGwpACJ>_a`Z%S%Z)1x-AsPn}9oRXP{m38yd0{}`kNp}+!RAdselkdL|)&mj9Z
zJ69Xl-KgX^pxEG$!Sz1|A+V*#Fx%9_-!tNus(Bp8|Jmf6)KDi}oO87?q@Yi)cHXlh
zZwYzx^#MDlcw*eZo&VuIU~FmQ0YVaS+i!%B%UBdhP!*T4lMydTj)4gSwx9`Zm;QEL
zzY<XjGgELrq||PA@5Fgb$P3fJtKMNEA>EVV7Z3=Yo6BLKCjRFuubapJ<1(4J{I(q%
zCz|{$kol=Vwvr)sd8j^A6!~koJ65FT|2BZH4Pg4{7Tv!F0vnfP+8+qVBA3+B#_so_
z24FVrJl#&q(YU|nynjgV+vz~~?e8D|;XhIPK-{F*tQ7`<`ot9Z=Ru_j$>=6$p@e|{
zyrp~KzrE!U@|LU6Gyq?B{pwYz1j1Q+c$>dlk4Hf|d>`a+(j(rYzpqrN`s3fPR2r`I
z*|V(N++gs$WM~HugHz#Of8V3D#r9b|{Hr>!)@Daj|MT6Q%zs;D{=@LyqPo?kqC6LI
zqB8c|&CSRKm#R!iLc@$$k&C5eCI<U^rVQ%n#QuFy6;UTTK82m-5|aTvj{09nQD#{Z
z%oIi6qAg)?_1^yV94)wv9RD_vXFT9~&w&;r8(76!dq6wQpKotp|7(=`G|q)vuI|N~
zwMKmgii<Rb{Cg=ZZ@KpVZSB09*pK?7nAf;g0;<{UiJ`|N?`j~|+@~=i842VZ(0g@^
z_Qe0bX1SySnZL~<7v5d|3MoLQzJ|eI8rQyyj~V{;Uj6J9!<+C=yoQxot;e7I9;xyH
z*1wNb2t;5vKuU-0z|rm0anJw#khJ@K*1n%cW-oM8a6wivFd5SL*P?$<8q)peCs;s?
zY*u8^nYlyjgkD9au*HCR!;d<P&J^9M;=ESQ(BEI)H`M>%-ugz|;*N6NB@`c<;JthF
zY{kmqgJ5OD1OmXZ$lk_u=<V%u0ACEGm3yrG)P-2@x}(qUA&9LgYX574K?VsHTCS2*
z!d3`;Qg&9>GwAb~fkJ>HR6TqT9V+tLuwp=FdUY9;##yCYEW!r?th~RqI?3@}DE6=C
zd86<6-!F_1iQTJU&5N#=0cg#%<a^*X(7?Xxvr7Bz&>@hr?K}aW_HO9w17US|(z7nr
z$=YZ%7mVO(?E>DRnGoFXfy%5N`rDlD@Li>0;K|0(yek9Bsp(9IN@``Lc{nNT>@A;8
z4*0;COE+)cWdDdqklbg;(*(Dw>zIYV?$>{*K>F|Zo0No7c&8Fb&-UjY8u~9e<P>rE
zfI^|x|9wTun1N!mA{aHh-UELfMGEewf19utj4)v@&BGu?M9_!){F#zxRzHKxbsJvc
zx3|-}X92$Ws;{kAbuNl`>pV>C0Y2~Fn{t2u+rKTB!8nw{4`&Whi+l9PB+i2)(3>(F
zFf<0Kg{9U}_&9~=u&)nJok~edJJU7m(zgn1)AM{r?6;z$th9gch?n^PKJX!DP)rsq
z*_u2w2amDBt=-s8A?m+sn5iSQj={&FIJyP}Tr#_7&xMA=uF?ei5s+6z0U8y>9{PQo
zIuHJKn_t9WWz>LNFdBRkD#k-okRz$O8vIf>Hzz_(Kfhp(?WFrXz^|VFeKpF$YLvQt
z`LfCS(ulOzM$6T6;m>PpWmNup|5Fl)1ifcqN84ihzu0>Zps3QWU9{CvM;!yAq9Q?1
zP*D&hX9Yz?#7GVb3Mxq?XB-nqQc+L|EutclBxl+{P)Q1slaisyId%7WHag!opUijb
z+^Tcy)~WitYR0B}_q*TyhV`!StY?8?`#5+#wws-qJ+eA){~bikc8J7zXAc-Cy<tql
z&3qfM%nzjk9)JEhbMX0zoEc)kTXnEQzgAT2x3N+A`t=ktwogZECh|ZEAOUsXHA(l`
zo%1Ad_un?WDKv7TC%?Qn7oX7j<)hg@*>Ily!{@F4td@V62g7&n>&}Aza?e>S^VjR;
zS0HWr*AI!4m+%<OeMvwen)@l~iv0g{e9o|NF8;rE#D|he7c8*3QB~7#X6DZirTt9!
z>qMj~ec7DH3{lb5)y2LzK>YLd>j4!N8|-*R_!rwry@zo~^Ph-31=uYzj*ho>uw0nC
ztaK0TcyRmFj<rloH*SzCO)k9(e|1R(d+We@{1{_MR>uBb!@{C;_Uv7wIro2k{3CWM
zdU-IyY5(bp$1kI!y#Z77nO7?tdtu(^bqg2XxO+5$TaF^XXU=b{J3&rHbPOB10QB|?
z=gl|cBCXO8z|#sn(mSr9@odAKA6ZLHPA>csq1yEFl@@bbTND^Pj-GU{^xLdON>YR0
z43bEld(N*q$CfVhdiwe`Wb}+Uky`)Tg$MW7kz(#1HNMW6BO~4zqZP5TF7E@Rn0q+l
zlo1esV*B*vOO3ft!MV3Iv<q?y!kitssvGAED`VKBF{0UyqX1g&E1uIE_jQ;NB@8<X
z+8@vjStZY@d3c%o76*rSj5*hyaX}d70E$v_3#jI@+$riLZTWOg=$|f>S&Ivy>i^Dp
zmn6@rEE(eY^r?Z*oCe)RA!2>4wSMQkqk@hq5@Xi$sB-SYnAqevb_BB?c7UV;F(u2k
z>O>^;g}4KAnv|Eq=N8XSH0QXhZeVg>^yr9y%AAYbZMW1dzHo%Zxr&JitAdzara2dV
z_9f=&$&+K;?jDeVGbbfOD(4EwPLhzTdotGM@ngr<V>xV`GlL{HPB{uEawtURqZvgk
zUz2|uE`QzCnp0Cw{yIs1_wUb6{Fm-rMR&L!tfnn&2suv5NPo)p-R-Ym|Lfm7%Y@uW
z^V~lduU$8F{$HQ|>&=zD?JFU-Glofb4)1q$z4{Nsw*os;amQBrvWz|4Bx^$%$JT%7
zZR?#Lj?PBH5)2^gKbf@z|8)=I%^igVw<k`_FfFG7-Ps@i$9J=TNNky2oFRsehAei!
zzj^NWR}PJ>v>q0eU-m?bv6^!sVbA^N>pw1l%lOxqyUsn@f(GY5KF=L$sBO^w=S~yp
z|6(!yf8>0*6Sok<$Vvv#ajSV|Z{>%==_ECM4$Fz}N`y_ANzs!G@ih*0*a5SB<0a(u
zSXOFw<o47ghWx4txO*JDIFBS>by7p)<r4Ws$I<S!fOEEVR`4-DDvFSEo33k;+%hA;
zWdOx9{@lkhp17(^yZ(uqQo0Nj?GVC2@b{Oy#|Kv7m(TQApEzw4f33)zk)|SAvjsYy
zaAwxir$PX4zdUZbJ1;L!(6st<G@+h{M@L61=sT6G+=3C?_qhsC$CgsIXQwqZ);CR6
zQu5&SUWE{<?-3qm)XiO9$Y_!4^Q$w@%>F)^$D+TcfJ1IOHtbWFyp4_~M}u9b9>Jb^
zRBq+eo2*`d0+shqQ@;JVtmS#2QA!<Enm*x{_c<&`G!mGOeAG5+TXb#ROt-pUUgsBW
z;Ybt);K}!El2eP>VPRQ!@7~^c<Z$GIi<z)e@`l<94Zpv;G1%xd+<b$@l>@_CY+grk
zqu77H(ZMYzM>*tD87<cQ%>SsZ!QaOO@9B|A)}B1_Vz7Kjx>YAtW!NzU#r$zGF+L%7
z^b=ltWrRg+x(`{F9r8D<etq`1wl-^`Q8tq?+2tr8DHo5j_D~qEmhYE06}}SCPT4sI
z5abG%Ua$-Mt(UgHd@CovP=K-;^KBcHDmV0jyBRPW=)r#)Rn@qR3lx~8x(or$tLo{0
z^l{niXeB@P_y${j?+ts{y^$y+8PQ?uud;~OR}QEqbEH4R-tcPKbf@>8@(be|43`s>
z=$Zivoi<&t(sh7VZBwPo_295bW`9OThW&IeC2zFKO%Cvd<Y*AA#Ce#+rt`;UbbsO*
z?M>xi)n`nlTNbd{N$icS%Kr$b6X}rR-c!E}j(jQ)Y1I?2T9@&L$_=+GkRbI?d~m>i
zW{@{S*KMrUq_o<=YnMUm2PR_8Y}>wJ6QD-kD9n^xV`htVNI{pWBvrXB!^4IhA$GU5
z%_q+~_nLI1ch(*+1)sjl%A0WXtLxK3)?G`HrB)mIE6@-4)JlUZeBo(Z!ywayL(YR<
zb@>6>zMjX!59ApIE%zE4s<14P&@T@*H){QGSMdC&)@YP~9B1TOmCBG$t3E$L+){in
zmsv}M{rQQ=YNMc-mYiwVbpSYfS<)w2&MjOnH&*SI2P_zKorPS=AsX1-JyD`gIAEt{
zx8kqztRa9T@6O-tz2~S!h2zN=!PUDKkbsQ!jn-n&X<C1fq$j>zTTQLApky!ewY6*U
z5sOxz&{u@fbSS!`tu61()ddFNgxgrBf<mC)oiNAzwOm}X^Q{#Cb8gd2hCP)w(X70>
z3MDVx)=Bjy83yT@P-yuDNW5|)_KRjAfA+|beRpI*V*V>Eq@CbmcC&i=%PhH@LqU0M
zxlwD)+RQP}No^LTKLl=f4wv4ENyzY^#CbAV?FjE67jmtO?Mk?n2BM~<OW850jgo*$
z05g|w6Tbq~$Y%|*GcvTSF4%=1@Hre^_4RA6wnecgqT_IX;m-B1dwj$iy_YbLsn#1A
zE@v<sERGQa+sH&&pl$K1(#IlvAo96;T5j~~$=Xfys)_Nt!zI&>^{!6k-x^lRPH+Or
zqh}hwzdYW2X2K<0J?==f*6F_MbH@7w)Fz)#pPy<>B%d7|8|5~nThh2ws2jeBt-Z@a
zo*7ZuZ(6mdouf*wF~{}X&Y9ZR9%1`+`*yDsKeG>7Rg(D=)#nCf&sua?V+K0I{r1DC
z+((lWxuuA77qdoD|3kc$yeg7{2&!#l(Y3bJvHp@bi0edlX0|`3u2x7y%COSWMXLgJ
zZ4b4!wIyHjUN7V5mG<q=VeR@R=(C0>Rp3eX@d>%|>7(Z;B%RFQ_&qQF$L;6lJcwG(
zIufhb<3U<WL%Fi-k|~qt51h_5_sR$fP8ln6G4k4U+lfMa7qctL!d=z&18;BXY@r_0
z(%Q((%f6P_n}TpEXuLkNx8AAWMbK%?w7Ba}u->sl-kMv6oCU}CWQQAflpe$pi@tN0
zq<#z7v?5jdcRe_~^`<rQAaYTIQ9J9vc%8+*O_sU2)vnX=z`CqO&g#LUN5f+WoY<*U
zs&3KerCrvNJV&bKqUc|gl$%GZ823&yYO6|oPVJCb=}MoW6gYIaaJLr+RUMP+OEYXP
zQx-V%2WKA&Lwj>jEC9CUc>EP<>2|20w$26BJ5G=xAkwC~O^B7{NjS6q{>osR=l<qE
zShL5yhi*CyQ42=jhOL56Rb5A%4Gu-fRYJwaO%$3F0QJfd?@c<H*bO2DPdE`^g;>W&
zzkhdQSqmsUVwhO3R_QspgiuX0ds95;xq}6HuqTny^?DrHB7xEYr%y#&)qVQ($sVU}
z^Y>dEmiMkMG7h%XGI-LIJx-Ulq(K4(Y3L`MyST}=IyZU>pqq8r1IOzv3wk~4kWnJa
zN7~KR9CnM{H_ml5`UT_n;!?kl{;D4OGtGfVH~syQ@cwfzwCRj2Otzf*M3dIAAC)7#
z@Dee}Ayf7%rFuShehF7n%T7oTavcfRZbl8UlBFb|tGpoeS0jZzv4rvVKAA&*;+>kH
zQPD$<qzlJqC=4+^qGHnXxGy;D1VPNdZRbvJ#L%t4|CM1`_arS%T(rsg+#ejW(x^Wv
zXxEoHSR!Q=j`+1zC6sL6<Kd!y-{0R-I)41@POT(y*@-i*&J*8nNw{!;X4z|3>LzCJ
z()i?gu@pdjvGJ)nXT6;&i%=z3Lz2P-;|J8b;h|VR&FKBcx>s%tdVGbNcK+uug>d+t
zPys6hy|j$j<b|Sp08@E;xYDNb%APCFp29f1&DM;+F$ywUhv_p<8zYYY`wt%2bQuB!
z;cSqd{`xbad&IjoIy7Av6VY?LXtYx|Ll~@u_mfS(zAR==b?6Mcl`x;g&9y>$;0^y;
zlDI)`yP$bJuS}>MgNDK-c`ND|MUMpXXD0inU;m<=y8GORlhA}!YfXQsUYU8O)A-1}
ziFZwEN;`Y9u3Gu?k{@cg0j4nfkgn4f@x`Lr#=GREI>WWrlI%Of^gW~E=ttFPh`>uD
zgFJJWxs+M$4a;{+{1dtXwCuGXt7$?BIh?B-0(FFBP$F$3zyz9wQLkPZ!1p+a(;UY-
zO<eE})sEuCkNU&q&C`6_w|k=22BR{w1Gwy<w3#6bu}EDvnq7<g0v_SW)9O{Z>`px}
z*<oVdMs=&av$xnD+Z;hY*x=j6!!5w*3P3^Ylr`TABa`@k?_#!x>%~V8HAS_w1?qd6
z#L>)mYP^0@&Rz(~zR9UCUCE33$NJrz)Qu|7Pf-5|Q_eWx@8~d?$3pyaJxJJ(=ybIB
z$@xZ*={EHa9lC7masv-PZw9Q?TVaKSI26dl0Jo7ZN|qfVa-OKhQHrQUTz~a&LPw}m
zE|MNs0a0D*C<g&MNM=lG%naNTQ#ybCyrN>(&?m+Lc#Zu>QFOc}t@$>ewsVNTYUoDe
z5Ss%;k4$P14roE?>)Sy43c`ii{DIrggD*C1r%5(8TfKd6auqjMGfrqvtSsT3fX{r=
zl0%hfs^epcVO8Q37oL{&lj^G`B!pqE$9K(w^f6bbuIG;|>&)bQ)2%vq`dYwl;eqXS
z?=)Gk<$D@^s-M@~icmX=aXsxujgf%v@HN*ADy0}UWl%ylxM0rdIJBMitZIZF#k_da
z?#+X>+K4_tCg=|8Ge)C4Jkkd9Sq*SLi)k7o*DD^lDjbfvp0^6XEOB?@k%)PH4mHby
zf-~C3U$sOwWxv<Dyj)MEnDJz3$B}iK$z^3_xpzS7o?5tcncj4xacO8nGj*rty-lQQ
z9gTiy+=fu);av&(>hG%FRg~|;%7MM*?Qvnk!s!OdmsLzQ-={A1<M3kkiFEy6Rz2wq
z_g2!X&a!pv65F`q*z6vTf0Vt|IO$g+aiOE5fQ6D~)|{}I-F`Qh>=N0-ODi@=Tu~h9
zD(8ie)N=O8ahcw-=#U6YPNj9oRnNMy?gxi-+@fMqZiDnz0$N&av+J^D%M6hk0BglK
z|7#>~o<xUp%;w)rV%}b>V*Bk;U|`?`z4H9Px3`+f5O&7BCcVSpamz(%IP&`4$z#&K
z?AiOJhl@^HLP^R)#(Y_E@R=a96kqa8Yiwr|Mc<1GXGbovsY<1XPi2i(28(wD#}SIX
zRKp;A?5|H(>1)SA76!yIh=!pd2@5*McF~%|aGGzzu3isHBduVpIqDyR+8j8GJdsAe
z8=bFgrrEYVP|wBGZ;T+j8r=%@2Z@A!OLSt1sb$Y2>B(Gi`oy8Z?EZ#TVBKl)93Mql
zacYd1@xqTHm9VHD3Z1`#<WYT3Lq8dQ0LDV?*+yWmeX-XrdqItSw#8v*KTI;Y$&VrN
zD1aU}>{{o>pcyb|<6eYx{TdmOkB(HI3qcIvLuo19I6uwONhGsLW~^GqGALkQ^9tFC
zC%I<rMGjI?m4wOC8Mc^+k_0t0f!?pVJBq?wu*u3g*m)>Y@Jg#kG#x%RQE69b)T>Lu
zHgtTGU48uEz<a->>cVheNg>N=hv7#3eiMgVY$>WedC{5{TVmxb8m9*>7-KQfjxa&_
z@`GAUIw3VK+6GBjHTs6wHAWta!Fhs+(*`if?G2pq)?%$5cTgb7vC<d+a@d*9z}arC
zso-VM#{S5*srQqN5R-zJWZP!d$JVCLPShya!T6dP^b^>xm<tnTBaUXzIx-Zdkamr!
zQ7Y?rlUtMIdxmTjZV2{@&}y?(0lQCD!k50jv~Rt8>+y1i$<XHD!+BVo26zNJIk$X5
z-0U%uPAeIpl-3d&eOCn816GeovmE+P$;G@R;JbW;Hw?f-;0f#L$R?{=gQACmgEPaF
zi-I$8@q{^EB0F955~Wt}<Ur}Cq^_q|X@CfcP-)CX-IJdWcB5TW;$pO&hekI-On&GR
zNhp<dD)17>c}?6O2(*JRRSh+-URITzv~Hf-6*Aqv&!}qA3!a*b5p2v<B>GT!O2M_V
zY_P6Lw$5Ne-;mI0>RrZFD<ynO9}U~$INoMi<H^h3)SN;XIf(_%n9P`Q3F+>a+{{$U
zbVL7YD)KpQcaRynm8H};#`C<Y8k0DgAeSZ+x0Q#6rkf}aHRReKhG!IMJYF**2C;*)
zaYD2|F@1nCIove<op3??{lzMXcu?T!coQ;zdVi@QH00G(p9M}(Fqntiv&m_V5Mp+Z
z4Ic@%gmpr-tCP(-5t-KYf>o+bBBM7Y2o|(kc1n6*hDpO`A1uVL;!yLs1O(z#>c;yT
zw1595$L83n-W+UIVs0fc`{;%G^ryOwg~eiw%h~;tFa-id{g`)2wBEVag0IRP{iJ|u
zEpRlm0y$-_2h;m1lOSjiZPwB3;+N0V+t%$me(Gz=w>o$hAeZg^r_K86(-Ch9NjA4S
z>x!g-lU{rM5ivbx-~ySXnT+!E+xYkjGsd)-Kh;(fZkJcDKRNYh3&hJpp*k2*UTkhx
zdof~5WuSmQlSQ_Oadzo@Xej|2jADyWlT?%QC>H7q`}BBo0*()&OlD%8>}2an&(Z90
z_Nw#w<rr1JM|&7|PFtA#e#Yv%+a6>3W<k?mJvP<$gd!LX3(W4LOX_J$OG{YtJeD;I
zD~m4-&7i*fK^+V1Y(tPVvd(CvV2ub`cfRl}1aPm)vidBuVO;i@XTKX`v7kvMt0#4|
zw@&P+`1gsM9Y}~*aeX{oGpdzXJhfip$~pgzD76O#Lv4J}Vq$NY9mtiP?&*Eu>wyFu
zamI{AQrb~qzoYfCB?Zrz#x!O-6+kPfkMuRejAIxZ2Fio;si416LJTe__6ziG!XVw1
zMHXuYaf&xeU-BB2%$!90VM}Z(;gEn**kQ#s4I<r5+)BO|EJF|jM4ayFN6Qx{B3CRS
z1<ShBO2)+#;$*9GzyUO?;NsG#Oo%6#mb+qs4}WC8E0xC^MP(aJ${(g)I_==!Ce~nW
znE2gk*}9z`1srZ%VDpZh=(QjhE(K5rCStwobd1WS;r3!>o$)8v65h}79C`S;Ild37
zfo3vJQ7?8G$8#0LDcU+|p6TKcvey+V2;pNAIZDv14NDh29K7623l0oqL6N$Pwwc#f
zNbZhr)H&9ev1MT>*m?<-C1`9sq~BR8Hog5-+E{H=i?Lj$l%D<f$%#Qf3*{_Pr2Vu+
z>C2?%(ST(?0DVWz<@1w!{G%I0tlGVLSI^%zv-0md4ev8jop+HkqQCFgwQ4d$HrJB7
zI2}*NMMio;cgi``8+OYmmoVNeX?se<Wxy-6m~}*Bh4gNTiO!s9I=Ab<H4af}MxH>Q
zAFK^Jp>s6fQCLx;<@WA64f^ygZY~4(Z7wFjAgA9;rYmu{tYPNa^tETY)~VkTE}hiW
zLctQq8Nz`OkCLVy6I(v?G&=QrLRfBxIqmy!JyHvm8|W!H*wK%dH#iO#Q}QoHgfJo5
z?4tE9wpB=c8wL8E##g*T%9JC>Tyo30U0U_qeS2@RqKv6|T6~^~H4$b<jW@AOzxONU
zcIJ#{Q?*7N%U`(gA&#z=jhJ!HRE1UIJCSKZ=GPDR6ZXS-Gpm_F|K`|C*Rpm)%Frji
z$GT(m>HdP&kGvvFUPyI4+fKM|as_*aC1(cS8zA|~vyhNc9ih{s6T@VEvzO1yyVCk|
zoD8Wkl-GK3d(3K6SH~45cYK3q&)2TWB`z$55Z1d=XI|Er$x@TbOR(?2+29S~A`%H4
zu`viHd$Wd*!h0xXTmd%P<_u~M3t<%dJ3_N2v`~08tE0{GeH-`*-)L}w9IeZ3b=-5}
zxbDjuj^#-faJg8u&QE0fOiDT_n?-NJ#lJ&c$5JzK+67|V;M0BopzEzJNa7+iUZbc|
zD+KbSF#?t_Ek0`576~d9sJc1YskuN32-**P%cX&bsKG2F*8k5*7=?At<V{XJf-zcg
zuoqFqu2}<CYE&hyXCn0IxOc3PnS7J+f|*KLeRX&8fZQ)jkMsFL`M?U^3X$=K1I0H6
zvj+2nG?Oc$)C*=N-BfiLeEJgSu5l<^omHjKdaXQ1Ip_mQo}*CytUoDRwHL|dJv+oJ
ze4Vl1dG%_W?#Ku*3=I0^njv|pvDc#O?X|_J>$^o9h7PH`V{mbS4sjCBz?Uz<)K$v^
z^&H%8W#%=75DJ9Cqy{!0*`rdu-q8aT50ABcvc5=XI{-v)WdiJ3Dw}(1C1D?Gn+oo*
ztU++npgA}EF>b9mGZeToSJT)fS;5f?BAcg@*npsuy11I2YAYQg+;!c4vQ52`YU3+C
z<dN$LF}LaRo4vDLqE8eA62`>QtN^J`c9ft^JPy>DR5(gw*b3nId~A<(&eLcC*R9(7
zVct-CA<HIh^Yrs-W-vLmoypmb=bx&_y*L{HpMrLC1`hHg?_0n=lmFo^H**!-s8uZw
z4S7VCFuXj{+5+kfrbd)2qx?{opxAR14w?OM2_|+&ggPE>p6bsQ6M#SL%L}VVYc^@B
zsa1wmsp8ptQk$+%(E9aFE2hZVrQBTbj%T#4mx3S>v})%_=x)jHWku4zg{{<_s1y;_
za_0|IkJA%0$o0rQe`vD`6BD6p<T@Vu_ypjd&P6hzSs+)MlIYm7*mW07ek@@@YR7fv
z7uFe8r%#?_E`Oo>wP%P-AL%nHQ9hJPDH*RZ)@e>AJlcUeS2Pprc4@rkbRCT<U=GBy
zhBhPw5{e5{I!Zg}&p8ZAf>VPUVv)#2$m!hk9U<caW{v{jtvs1n$e(sbE3r_|b@D;(
zlXs;iume0tjmb0>K#8(ydik?1Yayha+$}=59HIDG*5Et}U4MNYlb{>DDTu9H>fMW=
z6(3(g#O6b@kIw7O8T7H>sYFg}=gk7EjuIc(iPuXLUz~NNO^;iosQZA|GVJ3poE)WE
z5eQQp>TJNiy^|IPm+C`NGsna@BCnMh^AK0z0$H-s5DJ86VTmNQD7tp@txfmS`WCE|
zu8yr50hC5+WU32V51d)c1R<_tv>33AOXvj`cB}<wiSCtP-KJIYb7tg?7NA72QPHs`
zeVNOTN}Rux`1S&YKDx)Vj#$FNnG~e2SY2Z;&2sqo_V9F1qTS5*l>)ioiP;Dil0Ys5
zB?@%|1hRz_Yc9umTo8R3t4fw_pa-ynT+IN*$lO?P1e#mc5k|6L@GdzyIRuO{bOr3H
z&rat$TD9yq{IQ3>gr{C8cdEHkxQm%;ku_*UIC-ezaZMKEjfi>k#nT)5^_rS(i2#7Q
zp2PD81=2k6dceIwp{{RE5o;I;S6jT?mGCPb{ln846JM3yOT>O4eWDsuEy!v<qs%-#
zO#>58uB|B2q9bf`t^z?0GEcwEcHx0Iw-6k@YT9NMJ;~!p@=c~DSLs}ChvTfQ)d3sA
zpj<^vWk%Yq^{!H#H9yL0hHB`im}=hASHgC%ME-d0M_yIkj*Q}L^7r>*)C5B_69v+Z
zIRSj1Hj{au&(mB~6q`cXQu~j#dT{$5j4lnOsU_|`jx&7F&uynS_Mp)&sc-H}EGte|
znZ9mupiegCp-&IeOp*0u+3Z<R0HvFQi3!f&_{-m)+Cw-r<9TjtCN_3{4QxZ)qNaHW
zv6GjG{Xn%4rpcQdR)0tM35HD3!9RvBsm}Ut;IWq)5y|&Hv_b`89y-~^TpQzw^0$5<
zf->4wXIp1R_)*JZZo&`LAR6zA;E)%zcymQXgO?YSN1we(u3Rs2>68Htj1$Rg$IJEW
zk_9jvp5t0Do!}>nv6`mPZESl|>ddJ+7O;{JMVFH0+(PQqPM-#Ji_ZX$!{+GIlR@S8
z9K|x`#ClS%a`4%*Yr02#Btnj+YVdng&U7CuC=$*oD)wZLr$x8H`{ZKT_Mpl9gvq8$
z4g+r&i%i#)RYL%WrZpnLJ*9*`gNJEy932Lmf*(w&59fqbx=}>nHWT+v;{5RQ@Q6Ga
zA!;QzlV1GRk616!0{S^KRx^#3*3V9mgIi=>rgHJ@EQIUCw$ULXcT^yw^PN3hZ3dt>
zD(<sF-#te+E8NV5epz+Cpe}iyD|z|E^em9O-X>dMK=p-Y&<o{z0V!*?-A_)quz%i-
z`3rxmXKK?~ktWZyaHZo~O=+d$cdTAN9q*Rtd8(nPBR>}M=fY(koI&SJw(DL{R?gsk
zbS~jYABT>?`=V!uf{v7xP)DVui=5r2jdO;BTFV_8YbMg?oSJ70v6EveedB}+?q%~$
znKfO@dwD!O;pW7CMU3&YiT51lMd`f{1;Z14fln3UQK>!uX1*QRF9ZmnVKp=-(R6c6
z;E~5k%EW)pGc6omL~LiOTR*qxQPs*%4mJL75};)xH>TIW1*Q790C}9EWe`Vef58Wl
zQhgLmW;fGUPu-zJ`qujAGE&jnjMS}r?-KgyWQIA}#u?$wpn6eYzjr*S?J=a(;rzX8
zlNA;guT)2w8RC=CvPf-6xTP7Z5ucz`7pIe+(6oRwj(r+j*vNLQmKD&_FZDBH#+@*P
z*&>36^1N-vYK;5&`%8V0Uy~0FgbW^hZSA^AFw0y^WS>U+y+h9RX@d?SPA~zSg00Ia
zM&4xCslb-ZCYNbP*|B)TL~|!%tJxMKvPHJZdiCm3;`n6WMr2x94F)yUuY$ixUdO8V
zwB`a%kcZSyykp6^Z$<83q2ycuuzbptley|XQf92c92I)0=DsEFF{ks&Sy6Ohyb^U4
zTV+dc-+n0VaHWKivFs*7WnBv#b$Q7%H-L`Sj7x>{^)^@mwJjTLD4XsNC&XKp?=?W)
zQsWy5y*g9Jji=HPK96pZ>e(Ik?ULrn^6~GMpalv_){PzbfCRyCrMgt`tv6(6KjkWL
zN{GRq$)l#(mM!_`+29IFbxfk&Tux(bxX-ucN?}K%oPu~qaS#jGk~dIc;kEbbE3Wo@
z8PmJ5HXU;1!i5Xo=Y(oT0|OMf;G0^_!~}P&alR}Di37D^bo1e7xm%S^5OgalDJkVo
zBwf6vq?r5q>;ugOg5Z6DdxMcvBch*Wf2eZsOSsAO%qWejPcHgh%ela*DN`TivX&<I
zbWsJXL98bQztOYB)Fq5xLM`t5cuA|O9e1hjuVD6Z$*FtAyOBE}Vo~vVcsn_I18MBG
z)n{FDN?|y&$7Px~Oo_KY^vi=!=+U0E7%4)miPJ{PvsR{TM(It>0^TE?n(j>=Of~Ow
z0{C^+E+-#(p0GF&%6Ku|!s;5I)eVCj=J~1H5jl5J3k=kAl$dsrQ<`Ya?9G`rm(dca
zlG&wBs?9uo>W|)W2~;{ITh#;<`M-K~R(C8JQ0XFl`PH8GP1B96#4!mZm5t^YJTz_f
z=2(i{cMqO(i7O46Hps8eTrkf`YCL1vm*N*;VVgr;#?qsQ!3Z+u&3sgRGu3t_Vg&&-
z@g!%5%0UE-M+@uI=~Ju;zNj^m2UYZIl#?~aTUb~)KgHnWX7@ReD|ZhMgRP_#qZSMO
zwQ=kk8;*ZflIpQ{B45i(votgu>8y3F8OJOQhK?WcMbIr$iQ2JLy{>wN)RE3n2OXP=
z3LHG@1-R3i@)vCDIA*>rh7)NFsO;{8TQW)`WoRP;1tL{CRG-&A8mK8xgl-I-iS8qo
zW#(Vkv2@h2{gLsq*Z@AYXb(Zd0|>EM6)Ck8i>bGc>VPa_kIA-bLdy>CEi5dY?$Hr7
ztzL!bT}$H$1m8RrxqviIt)q0v^ml!+yi#0+)jK-SC>PtLA6TWQy-JBAM8XxSb3V8w
z8jK4Zdg2QVQyYY?F{4I<^ohu#*9~x}9F;r(aPAK*z&0)}BscOJ4z+&N4d?|26I|xg
zLi-kQa~TyoZZqsD7E3J6KIG41Hk8HenQMe2oYvD}NgJh<tS8ITzCIMb7#K{xrrjJe
zkY`s)H61T^1ApkclM(Fq1nJi}W-j}W*FhuM+K~X3oIUFV^nz__GT(3J<^qFpYWj4)
z)I2wIs53Kvt~y`=P?TvyK!ib=jZOTwuU}jeG7nW%?BA)n{Ba>68fY1eu5wi$3m0mg
zZoZawT|z8UhY~;15ZJR#EImKioCi6vrzL}GWa|q>a`REyN&S{RWC?z75D2Ag=i~Dt
z^m#BJzs*@VYv)Lg4!Fu4J$dpZg~PBWp-s@TIoEq|oZ@zv2%R*T2OZq<G{f;!<@tsi
zr_G`o?OS}RVT=mpBlt?mT1?`H!*7LT=NtSa$F51G$)C6Po=A_GvaqNq;ZVp2*M2Ay
zV$KdFy>Q1T=qZVUckD{#;1cGP{x4&Q$M=j^ZLOL%fH<d?x8RlygU<zA1Pz_xWA=lj
zIlnXHXu+ORX=Wy-@kS^8V8`z5x&i$Og(ZSE-Cv^%(qX126lHI<{C0J*kpo9h;>Tgv
zQYRjZ%27CttOySQA-Wo+Y`QliiW@MRQ^nH%@zjn7gAx*^8mCJ}p+!urmvhw#7;G`f
z_g2o7sVtFFEus~kx9rmwxCJ&WPV%k=-$R~I*zAI<C!Igu+wW@rtJj!o9}o(=>OUC8
z`LNw$DY#eai%j<(`{CMcq1m>_bnA{Qu|2SviAn8lhFh*{(A8Itp0-}r**<^b?P51^
zLsVp6s5uTNXPUX6<(qjNMULL7Hp>U5KHpk#8&hSo!D+O@fjEr$4V44=eUL?6FuNC{
zHCLWnu3BqBacP0mNT7O>d^Ezaw>G&hHyOzxyJex0pZ9iaX6En%)xS9QPl*{q0Og5`
zkdZ24li84Ri9S=6;0t#Nhu3r;Dz}?q=e2x2Nm=8m__S~W&FAsOWz|xxkXh|oIk?jK
z+X6vTjq?yO?e&BR>l&^loNy+jZ!DCFNg^0#RT8*NV8#`RH6xwt)4Ks7S_|}vV$tK#
zV<l#==aS47zD|9TqYH{r!N$_x6y6I5sM~&^fb(rA)3pf1&mKF;b>{;^_PlEXTWAdb
zG`OIsC%g!Z%>C{C#o~dZ)GFf;rQr?>dc725#!4(RMXYfmb7HEhv|A`(SFR{m^NS$!
zKL4u3oSe-q>mNK&AcSm4c^oB&6I}&mtLO%jeZ3{QB;EAmy{!`ce9#^=^)i>&^|(v`
z-1>{t!QGD7j?6pyUV0s3tu=VNJ-jJIq>9_$^|V;$I|ekt4rsgQD$gTaRyfhn@7mPj
zvUT<TLGYw(PBdS;cJS>=S5Ep^YJ_Bgo?};A^fWxVUM;@U*7c55GtEGK=fV9ll7V0<
zmWj=o`s6)`43T`$yy{e%p{6Ova0g|bQ$H;<x})Oc{{2fV0`~S0PAYJvZ8yw9sJcX=
zqbE4*6cjI?lSd~{RGwE3$U1%}ISVM57S<+lKG;-^s{q8<Vhd-3_v>OGU6;`Zvw|)k
z2NJD0sXV8QYUS|#hFfczz}DtJm*ud)i|0BvJ@ibs875KBa4qK9#j^d8e(`#ELHs~O
zB><;wu12<_P2h0WNZE$LyMCK0S`43^h>Q-iV`74n=&1C}06Fny0?J)UAC;pOy4c1*
zeZ=yvhKpkDhC&qaWMdUI{qVav8%EBVKFnKS;cBH&LJP&#9xS$S<u=TMd&MN}JCV-=
z?X1wg3HvaqE<M4ztL&k;r9mLI2JY`YV`RRf0fbMgqtnICf4WadC9%xDDqXQXCDOy*
zDvKmuz@PU0X4BY56WYvhX#uw3qroZF5XXZ>p|pefQ>8NF&YPSE-fn1VDe&_GV{r7u
zWGRD}Y6(y5Du6UTN|bV|f9v?7WbDR}hQc5_^XuC9lY7aMYNIu!daO>)#+IjKzEroE
zy$ZeHEmNW|jn%=$^+Hu{E7cz7@=TX%>c}PiJ;r)a4>GTn1Llqd_Vc>qpu!yYKJyx2
zh5{(BOoj!%y<gH%&DsQd$<g5Tgw8OwGD?vP8qL1S^N?1Ge$->SGCL0V#f}<ncowir
zJ7CYwzE*$L+sXnVcLj5B+UCP&xgLvJqP=H)X+i+f7riMA+9U5lc&{)Xj|4B4@oT0|
z&vdAM+DK<%vMd&<GOtW83KA0_He7U}ugus(0%)n4KY=0J0AfIu4fAfgeD98m^L+8*
zMRZ}l_Xg%fqXrJx*S8StXLvTv7#T?q<_7ECU}U$Hx`l?=IQLY?TlQz$6}&$CUZ{O2
zT627S$JZpPvBKD(Rmr4n31@~*Tvv^;+aB4eFNTTyb%;v0xH0<UjCE~6*nE!74F|ZB
z_457|ubjFgi!P_ZusY{0GxAvh4FP0$K)2zQUU4?4WhN#@<J{8sTSbEo36`Qnkd6hM
zA$JcypE{@4g!(d?1%49kozX2Q(WPwN`cN3=jEqr97C)Y0xRe}!+pDE$4`n0bHBMVr
zdj^jWw70io1jL&?qFbO8+*<jo6Y|NoHGK14t7wMa9#rS|O3U8)c#MNxd2FX&b=XdW
z3C7B(nmfMs+-s$B$~LW4weZjg-Ix?8WLAqXK5Ee=U$}U&t0JenTWvocAo{x<p+*Vi
z6Dfu`OkMKr5u2Hrs-oN$Yt%qG6~E75OF`ZWsh&F`ceV#wONNZ<z)fP%UPL9J48DLx
zoJLZYhrQGq>OEyTAMCBW@o_hA<_DiufOW8;L*(3tI{*o3enF^X!xh4_m~Y|c6h2<U
zX*rn3*Z{%bpU5wTP@7?G(tAT>&V8w^-3VG~A{Mo0OW$23b|2_4$!AO)zU*g#SHAwS
zpzM{_4{4*7a(P7b6B2!#KymfFe!l`p0`hI>I(*a|B=WZ4K9``3;6!bSkjoaPCcrVj
zjtGA51dLQtQj);UBC%mAh95ef>!6njfdb*1URjWr7f*mNpqRwxSxvqS_brl?EAZoB
zfv$N0+~-2b0(_d0A$h=OWBUFAZItn-blGI{_3mKN9#xx0KC)wX*F<eqW6s#4J#l`Z
z2=RXT^5us#^^%8{hY;F3G&s?snv3F{tDtw>Cb~o@Y{N2kd27{;*eD?8Z&B8tYUYXi
z4j)h7&<yzWJxX2r5`*gd;BhET@8Ol3yjX;`Qmrh2mb(kh2+x76uIY23C|JV~TOl{|
z+PrGAO(2e%=ztV4ZcuRC9jwh_&`u`AQedS43#TdZepkd12Yu<0&kMeQi4apIv-Cx<
zU`ttWA>n)SjtAGKJ#=N4fnR}l3zeW~m}!OHzAe>l;3t(*Qcfm}Mp8783}%UAlkg<x
z9^$2$%q}E=zruj6;|?*LMFYCnjB!Rl0#qZ2LWEd8XrvhA-Ci$c+rv}3Rh{!Bvb2M3
zfP2<7rfEYo?dQ7dp~!XDO3qJu=wQit6_sL~{b<4GeJngTQvHE@TM1|mj6bm-TUcP%
zE+0>3Uh^w*;IjmdrD=Po7C+PwcIV4##0+UR72IO8y+HIzrnbs^gIwcND+efTh9Ieg
zmo~`80X-<GLNHK-a33UzQYP{QT5_3Hi#Fb_4FO0;`3NMpUnRJrbqV=hvMNoHiwTmu
zP{Pg2%W2$j3UCSoD4Hb>O|Bg|Vz#DLPK|&KUUX(mvz%)%CxW1;hLNdMKpAhGej00j
zy7D}tZ*{Fy4WxN~JeN>d4SX~k@;>WIui8*6p&=WVw2jwWSp?fPN)TJZs;@W8YAoaY
zvU|Oe1o+|JR*Q4AXaHEiS$m6vZbdG}T4qD8uonuDS#M}Uq?YUMLF=2{<~^u&v>rGK
zjnp`0#7+I$n^A*dlN)`wCwROUD>{07+pkB<zWc}KyT3J_8abKZYiDhp%fYZ8HtHRQ
zR^P5OHd#upZ<~Z4mucC$ti~u>oNi`p!T0M#XQih)^)qxM($doEKBKzwIv^<-P9<%G
z^5vQIK(arpALx?$%$mB06Oj{O=;{+)6Mf8?s@>H1RO^7^OsA5ZFGP`*S81D6)1==8
z3yb~=QK(M4_1v=E_PvuGx@*`R8R6(kPU}snYZ<376ykgb;q+gR6TNeE1_XqejxI6)
z30a6mtsrEs&gHi&pQ31TqKSlYiJ@g*dWT(R2@duQU3z!auuwkK(rEZ|>UzOLnE7#d
z+K(}zhZ@OQ4#Ni6VcNn42wk#B1j-D32zQZ<Kw`Y7cRW_{#0MqcPZ@LoV4AJS(}756
z(zdQAl&AeHy1`bH*r$WhEf`>K*@0h2_D^J^o>?V{XnmqDg+BGJcty8n`jzw1TFE=8
z3ENLL1_~lkIGCw0kWv%wf|2Eyo&2bZBy0u0(hd`SDL&}%^x}+w=gNWkl$k<`ZDz?r
z7H2svEv+LjV!i@T%8N)%5O@s6FJ-dm*>6UWQL89)m&T<QE!a-|j%)*!Wo4`P80l<;
zi`&QL3cDMP>Q6{dA2`+6V<_i7vI36B;6sWn<?C~tYDZ;8lL*Xdh757)P4w9bc=WsU
zPb2z#H&Lyo-^ZlIgIjj>a7StX7YQi#dB(ECHH3Z^7uSKHyazAY`AXs?OZa*6QgcRo
z^=`GIWK1ps)hx!rgURe6`s0NhrIK{$d3Ko%*H+3VeKZ7)Lt~TMOvlssc;m1q%UJlm
z0aTE<_wmK9$A(Zz1FUKQ39IO^no_4s*;Ee3Iky!`q-wtYHahV&LY5i!eRcHs=h3RB
zRS3rnHpGg#OhsyTlq?sU5&dN@NK29X<-XSl-iP4LC&7qYx2_ksja!MnEG#Stocd>a
z$LORB`N~dJBU0S7ABJvaFOWvfmD(0whQ5;*qP0_HA3sjGb)ju(qGU(#a5Ln)2k47s
zVP=at&@m`}UFDQb1?<y<DmVX(!DOzG85wxE$M`5HTxE@4SJWn(NOHs>{emh<=%nkZ
z`~zNYmoC-LkYW%&lxum<A-e^*>2{Ty5|tG(w_)9!g|Cq1DO{5U1qYu$PJQJ#X5?$$
zb5GeQ7iR`L6fF+14R6#TQV5$DCevbD*3T97!QB<pGR?hbK)LUG8wnGl#++wiaqHMM
z6iwvv%C1EYp~(epi)))R0UA-yowwMTFsi>{wka&oLzL>R%ZrJc0^+b8uRj#+{g6f*
zlj7n69Q;tWqi$pDNh{~}J!CJ0a|43M)5pff>>*lPfd2N`s@&)?N);QK5@%wH2pM}Y
z5y!~bf)clD;o#FW38vBj$54o8&==>bf)Y=310CZ_=tFi8w;I8SgUY-bhGyE(I|Q9u
zuEW75B4Td>#16X>`{Z4F`ecVyN%lFR4YT&oNQ9qXKtMn=c~83R%EU>ORw$LsfeEgG
zwINH9BhG$+4>&foWFj^XcG<AHUSG-XhZEiErQVQLHq&%eVD&(2#3OIA{`?j}6uB;2
znofc1&_`Yuy<bs*3!`49*jnEbl0W+@azo7TBL+ENiJ{xgquR&^ZhAhHyU0V5jN8bL
zKQ5jetFvgThR@2NJ}n;NoDFyY&&gqZFA$K40Dk&4B23@Zg-~t%dHdJGiLVVTGQqt-
z^qO!Lg@=Xhz3O-tehTO!)iQ*Upm1{w&d{}k&0Yd|QE?@Ob<@$X%Al})hM5vUnD_)7
z3cYwvC|^^fX+!|kd%d8v;mk_6wCxC@Huk0v$XTC@<ts|p6Rz$SXm)*H2I1{<pY1GQ
zULiJQDZ4%%1^!_(1aG|n!xJNJ4&uOg^M(wx9EdC<y~cAS>KQQat-Hl8DFVCH0M>UN
zVL|oPv$SBp_9hy7vx<pAdW9a`A~akH`fB|=D9}x`D`wD4je%;Tl&&YsOy3o!Mq7;7
z%K-!H2hTY#F_<_1*zQXld4Sy;e!M5<Xd{c$`Sh&M#hb&ar+~;EFwg(b-7UXYJ3Hej
z(-Zk6r0esMY2!{%^>PydUhhEwbDe^(d>RR^^VuZ9WmM`a4%UNv@jc~a`jMR)0~yU_
zU{376jdS#zH*xyilC?faxf#$1%nSi;u-jl_Vd1x6#l$h#ommxUP<|X)F;+tRR&|uP
z2p*Ll+~WUB8s;|S^MzgBdLP;9`w&knDwYI8cfTM0Bj*t&N`OkJv;<20sA|4vJPr!F
z!C0HNr)1(1kiRVXM7mdM{gso_(>>+*8jeHQ^HU;7PHVoW?0R2N6l%8kbdN=QGC$hu
zK#J~uMIGlsx5vW&IUpqYy?n1?*c!tAIQH<;r2~BPNegG8Ss*^#+%e?q>#LD`$p#Wl
z6!>I<?wLSiTG61bZbLE1bvJgMf%O;o^3|*EFBt`!hU1CY0EJwR5DeiMDSTK5rOsJz
zJ|7k+8D<_e9I9{OM6iTav-ci)@v~oaNe_>TDC(MdOHb`XZsxW%jERDJLS$I+3xLr8
zetCFLZM}f0Nv|8A;27IG!67pS^|E~{@z_AQ9sUZuNl`Bx)GrurZ;xz&_lLjmcZN0&
z9;89(i~X7`>;5NP_9XW|uZ-1n<X&4@Qv1|}@KvklTzO$o#*K8pla~0VwbvfCuiyYw
z@w1j}IG+XW8bzHlX^uS`_V5#kY3tdU_gAGG<WK%Gx}-H+1joUeV8SzsJgSa7ZHtQ0
zOPPpF0l{+GdE)&oMUc_$D~o{#semz4dLDS3z+u-OhvD`-5cCQg&ZM=-vcb(yyHW&W
zXR|L1NAE!bu@-OLb%Oa<;ls&w`;v*0-L?g5UOayM<u*zF?W`5cOrFqy=(>6wpajHX
z2^#?vq9{1g3<n@VPl9ZQdVu`J0EJ%bbCfr9LI7EDbvCl9JpLeCX?`fjNY+TZ{N0`0
zl=+?x^@vjP-I?PT7}gn+WJjA2F8Qlq@L7l?<zI(_)Cww*Z8}S~&iMixfKJTB+}F^5
z;bpi=lAn7q>B9nIu;;w)EdJ-b*_HpCe##E=r}+UGh+kGG+8sJLwsMW=JojUt<$g=T
zUitOadbfvTn<;kn6Sv>*%>RYR3l~o!e|RZ~OtzgdGdtlvr+rTHIfndM`1Tgk6y&40
zer=s3&;F5q^&Q04QVlSa|37{&84~c@-1|F}RaS09b=A#J+zA0#Rd(;hFER=D{IKAW
z90)tMU5>oZv1m>oI62PINqE9H&&w}*zM1p&=Ta@L6T~W-zcd&r^blMBFpN`oqd7R?
zpI*fTRTAdrtGQGEc_sK9!(sAmMqc=vx_cj={lnwR-5Fev1sWx!!xIhRY362BcPi}K
z6$u{M<G*uqVZK=}nwp}v>94O&g#;IOAA*VnA-0!s`f>lzqs86SDsca({r<!s*)Cqt
zDK1<(ykl-#rdMCQIG2=^wC%UgH!uVWLN)6nPbKdA^_HYJM$px`ADN!|o%0&5i^|W>
zzhL%Y)7)9hh6`l1kIy@Xdk>yK)5iK4j(xq~Ip?%Ea?Hd;Sy=che0y4g?$NkdV)k+3
z{7${noTUl-kDokYjXY%qk*OrPYi8w#7>y<Febz+V-+MX0Z*X(R+`-IJK6z5;-p2zs
zNTS=rev?<-;_q`@pQ5+<Kbj@}IKw?UN<|n+M(vcgREEL^_t3*zRv*`t*m+pFaLq4)
zQ|$gfE6VQO&d<LI-0<yrBO39mN!eIK;W@4faNE!3K&7QA9-niUZR<gLdiMwqu}%ct
z^$4eUKxJis1|?@J%=K_UB8l7m3e6_Do2e-)@4(Vr$e5?C2=B#yXyzzzv30elBETT~
zFJ9DK!xBg^SN`(S&Q3|Gym0Z*egGG(C1W_>tivrwJYis~sHni9g%|}Fp_Mc@-`mE|
zj@GzVd!{me5tC^1nhMgztTSXFNa58`Liv%T)YK)k1yk5EPspx!E_%WRllRNb@uxdO
zAZ+e>LpmJeze=)yxZGX(pQ&*i{+Sx*|0farKOO&d{#*Y)KJ@+%jQA7C5NCoH4QM7J
zsD$*ZZT$S6_wF?x#P&aR>X|$qN?s4fKKKoMD=Skjn3(uLkiu2+1;yB~i<W*}IYRI%
zy1(6Lv5hfubM~#G+pH*Zzk2GYG@&0mabhC^xkTvil$zSqQ+{0cx}p<?8X-ji2Z7&$
z5c>CvpUkrUnfi>}oVwXaNcGprWwS(Vq$d=}`>A?hO_9>Z1Q2^9!PoId6lJ*uQ5}T?
zyw4}S*+0)-oU+wXAv=7Q7|YaTwu7MK0K>>tSwfeBUJPbMB3Vnb>JX1V)8Lq#quC76
z+8NH%YHEZ4lOiMWMY1CUj@5Y7q$GSH&&n_6)p^io`y^7v+Rf@{;eA>5FD!rp(U;1@
ze?2+&X0-v_kkH_QMhi1R2nT#7*E<$lC=u>4g~)f^lk;ub7e+RkJ`KN-R@lDT-&T)x
zE*}m4@#MSydU82Dxu`Y<(3@R`2M}nX0C?E<3q2ai(<M3`v>U0=(QXZy=@M&gY%B<a
zb8qGT+2*$W=BQB9HOq&0<Hrq1?m5s%s&^tvL|{hw4f|*E%=PODshe^-J*Oy>cwA6H
z?ydN7{Wf7o1;(@4p<Kg7`*CzkK~sIAj*b|jKn_@dzMRiOLM&QaLrna(-)nM;>gwy)
z!2PuW=$N{ZWa=!x>W!lo2Q6l=FuhU#b5im5Z;sKgF4-S>_}Ya)w)jpKHlPvt%}(Qi
z4pNemaN(WDp>;MWOK<k>?rvqQWwS(cOSQvBiM5BRl~TC5B4*~Q5GhCqX;Mh#j@ADb
z6BXqJS_dT)lc@QG>b7t@m=_fl0T@$M#EtThR1+Q(V-_@R(l|xT9!a-r`OlGxx%1-_
z(#S4oGdx7{DF7~+-n+oUh?r`GIIfm|tIXq%!^{vg3n7M>n=g%x?AQ@?xgy=OPkSz6
zcF>MhFAbYr(<J$(pQf8UKM^_r`s6Q#o$ChC!4H6Vdm`WEb4dpZ6c|OrOC6QN^W&jI
zzsx@JHq$zTpG%A`c&_vFCys3k?x>uu7{DX<N|C4M3lKdUM;}>W+7ldvOco50{`U4$
zNlDLAK2g8Sj(Vp=HZhOx?^0s^8bCRy`3c(*on6B0e3b=XK1oGJ!y34>hbONusZ(-r
zm{hZ4`!Oone?3^rgW26cBGEvvaHnEoumxty%i(l^f%#}*q&`3UKHRK8M%1g>E&uV`
zAf?#_@Z`1GvcJ|+Ae5>1;3>iR|8#h=InQe?u@;{MiuOg`4^$@@Oi~|PRn2z1TF7yB
zrf!&-^v#a(kE2u<ZVIsE*>ns8n|i_2^c1m`-SsY+ntJ1dk`5vqb^5eOXQ}q=*qtf-
zG0kgIVv>K(3@G}3%K(+Zk&YJpf}io35U%q51pA)QqaNoR%l`APe{9B1)_--O=SLUr
zplerAky8X4p>ndG#h#eUl=^&`fT5uTAZ0fsb-bFr&F9ov`AAw?SNZkF>gRNWB4E+<
z2e5IGk-g4+%d+rOl1q4ee7tfTi19^Nd%mrDT=8Sloc?v=uAev7m&}t_R77Ad7kQA9
z<muJ3v)>eng%AH16BEj%dp>^rc04fa$23pfnw2Z^XX`fpm<>`ZG5B0ukcLtmKNn9^
zU0O$irGU}vACk0F?yuXv9{;h~J_sOH&U=$Ynf?G_ZgdhEBO!jbz&MG-r%l2gFMd2M
z<*$c5^K+{1xM7^u3mPbP80vo`rnpm%bzD!h@8ciBKh`+?uXVM^<mVcnA#AJIXV1Xa
z%7@kc<M|j6*&%+Y!4&@Nnf05}L$lX%%KhthKc{6kK_Pq<u*YuatU)<0Vp2YjqYg{v
z$QjYT;y>2>xaZ90pZn@s{EwyZ<_)y1h33_--RKMZQAutg@xxAItgaA0vA_N9ul;x}
z=I_6YO&B6GjwKDsan9b4LEP!4)sK<<!0~g}iLU=S`hWZZ)AS7>RoFHMH{(8}p_e$!
z;I*HXP(VE7xrcbo?lF1Szt-&ApKIsLH^S~!)6;95to|_*>({f6UsyC${iF5Ce~o6s
zUp)l(?Lwpi9GUg2ERrW`owr==`O-PNoLb307YFOkpF4ArFJbut1$vw4+HMm1^}lgF
z%HCk4=(o6MpU1d`y;z?8$G+oa{541NV?UPCdU05$?x?n7Cu@#vOB}84(lu!;iI#pm
zO+Sw9A=RG(V|l<&VY2`M%r!&HIlr%)?bhc-2}<F!Pq_Q_&-R1Z0nx+$JzK_hbG{nX
zm|1mXfhnhx@Q<-sp!~DZt}n!eq%}PA+-KkX=l}lSIwEG|#`>f(ZeQwcnGo2VM+&=j
zef7b8zb}zF)y27Al579*HFsB(DPG)h;<vT)E-o!QzG~t26Ina-<}KvPK6ID$u)O5_
zB}`j*xAb#lDZYDjsAS3a)>S#=WQ}EGMWG4fMO%hnchqbl{e#x`?@qs&ckmxsH2-yl
z`+__F=(qXT1*FBC^Em(g*FU^lAwOUKA3px~N1NP#bN}~W|L{(nw1h-#kN^6*Oj=DM
zPLTil`bPSnftVef{~3s%Yvg}-AO?OP8W?yoD*)Zc=Q3NOwE+*y@Fk>kJV+Z}x?+Xv
zwmMmq1~qTWp}ncANxB%ml!ZSyx@WAnZt0TkdlyRzPAxA%PFyI8`ig-N>G}2RzlBIU
zoG`0PK}K}P#aSYpJFV0peF>}f!{fbr6j$Ajk`RAu-bKicJtAU0lY}~Q=i)VzY^ZA4
z69!6Kw`>s~ab{ba$SFFX^x+5?LN=%bi@$vZ(CAjj>0Z0CBo#L|H;~C`K0rX{C=m0h
zPEMOQZ@$@f_wHRaipBa~DOp)PfL$UI=aJqRe(bc1eE9I;EjpvyVW{<Zj`JjYw=4oa
z&*4s%-0(;ZG4j*djv}X{HIAc^sp)<SH1NZqMXo}@>I<CGtAoGGWXoTjKQuNbs_Q!3
zt`dSY=DuD>2ZxVMO-+|IwMxId%%;<)EkY!$ZhHNVq47@SUD7J~7x%<0^iZVndzdL8
z^p27+Qx;h8y3uEDa=5=u|6*}@(I{08wKyloTTZI0tAiz`3n~3k$gcV#PfRT5MdZc2
zIu&^$!(trT<txp^fGu6&e)&-j!$yY+>l+$QM;v9_r8RN`5yAbpLgT^>*5w`;cx{7X
z(z+R0uekQ#-iFaY0np>qW2M{q`F-=}-RZm1_UZfts_RsV71!xx+WI&<J4b&i@Nv>F
zk5I*6vWm{^MC3SX=*08GR8U%d{DcJCn3>68?HH-c-{f6rqbDRWt<tvM`72O&ZO6`?
zM+60{IBH!Bd|gyyw2~cPcG%LUY#wZ5I?T&mzFj*d8VUAcZ{CpJw}GSXgsEvXqEa#_
zU&JE3KKSvTtO$$78I#+Bw22A(g}?n)D--zz)m>wNwaB%0NHuRrHgAy3Ou4x3WTbAU
zFBdm=`V(Sce!d>9BP8k3y!Y=F0A4&Ed1C9@)vKSrc_Y7e+cA0MNuniM;G#dbY!?<j
z_5ARI6P~L#?@)_=I76eMu=4>Q)^XPtvi<zJ8S4W&K0Q#z3h27`Y>jjk(fYGk0M~D}
zAvHF_a-cd&J2iISzT14ecORtFZ?tuEM1aytA}>t^EHA>2BQKx1WoBkZ9e%Lmv6w}y
zq^+~(frakEL!+bN#7?7=y}Z1TdC7ihzC7vT9=pCx<qxUZ3C5+d;60N^AVodmXx!(^
z-((sTF@7gPJ{O?a9Wcl$<JYhI^SVU?u(5ZY^2`DYKI4*LoxcUd+>iMD=8ihZWhh5R
z?2^~PikfNE4suM~4d=<B^HaaMOI&%l^3oqmmvYVHEEPdlNGqDVx-M$;_4OTX`4&Ik
z7U&i83Fv))gZdYU9p7wQ%cu5i?>y->o}NpDXHOvUtH|oDyFb&fx13e<tG31Rs_OWb
z3-WK|$+FpIT5(9c><T6AMt#-C!WZv>$w*0wxXaJiou%p^CEbK7hIbE;?(hI864jLu
zqn-L$p19x}XMr!<o}CoiUac20#s*sU4@*L%j5XN7JKRG0*0GVe=G=+z-`grEZngKW
zk9K}hU}t9+<~s94EBTUWjCzLk#q`X~=hJkck~C2RyKGjf5x>Ig*`L3;;~zhdkN&(=
zaIvVh0jG5GNRiFPSzTyTYjV}pCxiGce98w8es-U?;Nm9E<?96KWxH#d5buTDTDgDU
z{MloA;6jER&qC=>z;*6QPfOEyz{|sPi8eL5QOY(rXR@6Y5=$edrM>+HzpmbMrmNG!
zX0@j<zM?V69e?G^rhj<c@Uo@lmkzSPv%kyRgEv@JNZ%~KguP$3@)QG8&~;^#r>FC&
zMVw}Yd_urK5_KJ49S_gY(M`O7TzXWEdSZ!3B5|%o4bjT$OPI@a7_b%(xyfMxehOS!
zWmTH24l%iwjV-1ov7_^A<jF@VG>?nl&t_P6-9v*hC>N!>_3-s=-CwsCPgvg^>u*y1
zYoysXF!LTQ1K7vq71d>`i}#96a%iSQPqn3_%arwPoAKT{B?a#C-<K~J+35!S5vtn;
zJaZG!O40xgNs?Ba^W^1?OlhjA=DNLF6nIu1%elE`a3~=qts>J-01f^jNmx98y_liC
z3{+PqU1atleY<NMpKAiPc&+p+TYYBrBHJ|UE`yBxTd{iCuO97@3qO0+`U;riP+IoR
zP13hjOP2gtoMpP_&OL)jIH_w<n-qC-2}#VX_F0n~BjjeT;agPx15roH4ms=2%L%P+
z_mW(uZ6Tx&+*rEyu$n7_GOv$M9b*5><r?H?VVA2$4SoK+8h*gC;vlhdnmuCaPxHJe
zr>w1oLl*qiZ>Z<<pqj}`?l|$x<M91$VL%R2iyrNfv>&*G&OYv&{`hE5MEBRo@Z8+r
zXoCgE_a8VQd*81Dl6uYh_0J%f+DbyS1Nn8oc9pwz!wKehiqcvfqz?SU$-7+i+kTW7
z2w^@UAt8lD0c*FPP`rBe>W*Vi+zkv2tTAac#8Jz!f683+H51N(zxd(dfIrFsqDppS
zxY9<e^hGO{uUMf59Kl*vCtW5cN>@LHQF4lQrckE6zn|EwHT6b*Li$ZJOIOBmu3Wit
zzoKF%IN78l=;YMYRIqME?YptG>)TreWQ(ujSWG<k2W!D)N_j~=$6p@Xyl~N?m&d~P
zWn5`{wPKU_6Ci`+l4#h2kw+d0?a<3g<JZrL=2oJAezeE9EXIXx?aHB%kyDp1zcw&5
zL=^Wya|UG0>4OIko}h4u4@`42HXDIc^AyPJ(C~)>UdmCj>~k>cY~yL4QmE^A?-4aI
zIT@*we&y3+kto~V+UKC?kjUEApJe!CW@g5^w^jreVi)`)i1j;dnT|xF*bepB;ML5`
zNp6g*r~3Vzrk_F%IyQUqu3?Hl&BCu!lvL0TB?af}j@`TEak`v1*DA;+>s-CLO53qX
zX@djdm;In4)J)sTJuxw{ZQC|N+^^+u(~da0f4h*-(ACmC+-_oaFUIAS{3tt4y}X0N
z^tnH;>I?BkUL-XvU9*jI_UxRn_xe5s+MU-sGVKTdeBaMvXD9Yxr{>|Xu&pD2R$b~S
z(d}B-VRdfP@r*sP(HK6Ictr&wrmlOWzP^WvZuChd6t-7R6;A{+2*_a9tXlQNv?ie&
zd~DqV-`{twjuJ9Z4X$`3J#A`&!l!N<FGDv$@{*d2qjl<Gc`E8w;8;V&-L942T`j8s
zIr*AmCgmFW?}bcyLs%i-=A~z3TzYqX3B<#598u8$NF&zs=W&U~R2{m9p)5}#OWJf_
zfX8|1@7pdVlaZSbFQ5kU=0z`ZHpUy?RlAl9?DccV7MThco1W_9AgDVfFYo?cUfC<}
zDT6*v*(gWnW|O$mdbL&n%0iU7TafTTQF(d!<!rdvUcwFd@e_2MOH-TAgi1Sr4&~hG
zsIh0rx;IKIK|ZmtU7s|zq-v@~lk0`5gV-t}MnxAM>^OZGQdX^ynVC7+xKvN&k<fmq
zZK^g-L1K(cBG*R46mETu*0efw0?^pmAMoqezUo6m$!Ff~b3qEc+5*n^?+Z~&bbJlF
zUgN8#mgZ&@YD{&+KI%Q}8lXpeje>s=OMH1QlT%aOxt=W_KOrwO^2Rc`z%9^JF3_ep
zVirk&1js)FIi1AH`)Y32AJULH{t|U4r`iHlZn{*(8!DOAB#2bd8SO#m)!HDscIak!
z>s~W<aT%s!%#tMoLZs}V+q5p&3U0+0a6W5}8hWk{yZ3C9L>4OQZcDy699=QCbDh`G
zVDT_yPHN&Z*PhUms8Di}EbDR~h3nq$jmKL142A-cv+opR^s;Nu{y6Rb7kl5qRpqrs
zi<(GGRAQGR#3&*~k*-ur6zNC@DI&ciy<?&Q6$GXCB1mu2i-3xVbm7oDBK1h`{mswZ
z<Yv5a|G*pLF~%JduN=<V-`;DlHRoJ&HN+w6IiU$Gz0U~Vpb29B!ge1^=Hd>LvPJRH
z79nIxkqm84;0Qo-x=B~=co<ZDDc$o+OKrG|zYGpOPb1ojX)aj>oK80D=A{vKDa6rB
zo2dHmVItfj$Yf<^keZ&VtIRbVS)^a!QyLyMc=bGsj*f;kT`JtXm?p{SNMcc9>&WU)
zlnhP7yP#QG?_KVN7n`^rx6a639=Ek|T{3!0M1K5<b@k0X+S@Mclg9gwUwD&n5kC7u
z2%Lt;nGiK(5$*e2?c*`LGGJnf?u2r6(7Es%zVt7#i_RhgQ5t;~5|R`WavVX|c<hrl
zg7Uz%BFb=HvlPq_OLmyOQxS6W?%fv+Q9`MRnMMGc?PUB09=T<!u%VbaIWGO~!7H79
zd33a=MYZEet-<Y!TleG7sk-~i%2s)dTMT)Onmbb5hlYk0Q7Mosj|n8K>?q-4=-veA
zo-sQlB6sJ`{Z>wFd+am#9IQ<se@5xh2D`Adws0;3AB^`5j$M9!S}|Gfy8js|?$;mi
zV1NDf*On4{28|-C%9A2Q@;NgmKD~U*;4tPAV?w*u;NYMK$4;?gyU8$o_IT{<P9CHC
zr~0`f7B$FIwgH+$G@6dXM@rYH9_i}ga*@N~U=%|?_3J(d9og)7CkVXTzf{Z9wTUco
z($YR>*AlLnLv3*UeO<o57q?{OwlLrIMpnE}#}(4*Vwcry$m)m>l+Btz9=oT9%oyoT
zT8eU}zO6=Iv8@DDcB#d-WPR(qrAU{E0D=?zVsIq{S-b`a9R#m-V6tC}ebqHIFpv8z
zk42w43PL{hs=KcYA@8Q)H7%5Syw=RxFp<V@KV_;?hV6w^3M#Z~9y&h?*f?y(p2mby
zEMTf;sZ&>$_O9|f|B7Cg3`A<#d>$EbSFx>E6tZ#B+blOXHw2q&=d`w@!j`#AJ7mwP
z&b@s1?&`kfp~1meY-utAXp($l@bLIJz<zc|C#N&(L!+bNpWR-Umgec#(>!I^jvfC+
zf4reC4MXJHu!zdg4a)w$^ZRBOb4;qbg;7g>K1~ahL8+;&tGd;Gm6pADD2A|@!YKB#
zanFV3$lqf@Z?rr<RJ91Xq)32?ZcpJoOp3o92&tmwvjiK1qrE>Kd6#E7xbymrEg6~q
z<y(uJD636dk8W*k`NbpQMmluFW7lH5K+ehKiB@@pw6L#3%h<(6y~VaEvL}18`h^4q
zTgqGoCVNXn@pO12ot>5*WM*1q&-0j6t#=Ri`8K-ZL~5AWZ?CL;QN}r1m@G(DfZQ$h
z%D^#p%>YkNPemaa85y*jm?Y<4!#~(d1{c{SWNp_FQ4}ELY!^N?d5}?DC4F>q@|+mP
zx3)$JIWORxQfmey^8UDI&#m9yE1}d}eB~&eXV!f~)ORZuW;iufRaG<B?8S&nn;6D!
zJ+jxVzf20rnA_NYq7vi9iybqOXS9SFJWE+ce&jgk?2TnF+q4U0QTRcI!{hVNP#ioW
zakbxE{Mvb{(o7i2M4Y4iiNyQ&Da4u)l(}su6e^I`5pT3~PMirv_Q}dEtKS4+px8Jd
z_$1}(pO$9bOW`zp=BCA&C8%-Y`rW)_5ey{POYgk>1LevK%y?JwJAC-KVO~GoC98Oe
zo)1AH$(4JozRa{0+nVsWZFs_dhx6&7!s23<)2Dxv2y#irZ%e)Lbb{Hu{rSB>1Pc;+
z&RSxxQR?CO&(Nu>s|O%}5@-UseLLy8SJ}<>^+pm&p7_yA*7~e$Y%SbpU{?GBX%+^T
z?%=ojlBJe!YD8K((J6!Q9c*Lp0(pKq!pU>R*V9vFG(5)fz*3kmuJrpBn&6H`e{zyu
z?NN_SGAa%<YnV*;2@yTv^wl~g%COqYh03lXp2|LR6pb=Q_&-y$wwZ@v&OD>Zv$i@q
zwxWvwk!v;lBgv$$w^t+2q+Pl=AJ;qqt6rSgtnA!N&G{QvNdZ2iQaa!H1+Xfg&ogcn
zr`-Rw{n3F_5pzNn)ctw%9}0KJSuZb^9^zY_tF0s!^T(rXhQ;in3%;fJd;oOPYJNI=
zHb&5KPDLZ<#yvD0sBg<o2V%4_@l?t-tX?6jksPu>MaKeHT2zjyaiZI@h+Ld(K8D;G
zX_kZU{H9Jn>B$;2Xid7+JEJy>ToT5_HUn?m6f@K>wK_DXD6$?wUI(KTzNbGG7Zp`k
zRf!VG`|rEf&1g&*#Sr9)$h&}^yRb9cCC>Gr1(gpRxV?y`kFyqiubIvHgg&P=)b#dB
z;WFe>=e6h)6vO<y+P%S)yLYo7v{2=`$E~ksP;&|MxbXg~3YaMzawqNh<>}RH*N7FY
z==}4kLaLG!szUjzf4DLPp1Ykd3G?JUBMr<3M_Sfq^NX@L4R=x|yor+UR{m($%8Cz-
zxN#P_ICUQrR$*--l@Z}RMPt`25HZ{b?BSHG-7juF|F!FtP6>Q@<WnA)Ob7CqDB&Y2
z12)oIE-GIg38%RbQ!YhDZmR<RKkzgfMkOEYE;W}gMdmx6ni(X>xp~J6hE}|lu4hi4
zHUwVbQJbPH<NC9EB){$6+VWL>M~@yR%xqp8^qiKbdmp{v^?AE7UgOo>O3Cer6vfma
zI8^v8+`FHS5S50#sU-FdyndtFA9&&jDSK4N7JGl9Bh<b3GHTOrGXh@4X)Gd{<i7j<
zhkf*d9aFBzYB2XET>-h6nVQJy)9({_t!)I8kcpw_dnwfpgzIIlPSsMpudBQ~P@Hob
zYk5+$54@XST(_Qt_bYBdyVm(d7{zG010pegIqoFYSXcv_$2bJ_@H0JJ^DtF50%kJa
z?1P<4di$U}{6kiqZex@N1k*QpF5SMdApex6brFb%nXxiTpUs(yWuiR6f-JNuOPHpN
zPEBRNH@Wk~A*%$PaE>8)sH&S2Mgsxt5R)%pN0Lx$EmAt<k1C`IRxf74!MM<B>nEEw
zLKtv*Ldim;CfuRKmc(PuVYM5?5k<^|&%TI#&GKFYr*^9^E3DWNQeoU;=#I)W+Vq}?
z4*2Z`eGZE?AOaMUep?9eCW~YPp)<H_()rysR;~%;BYiii4{H_k&+dZeK!R0?O&M=n
zvc3AzJ-tSucI4|)xkm1NeSJhM$*$I$MrFeve&|HsdX$LEN|u67F-(F#QHi)%1pdIu
zLmUfaPV!Pa4PCc8=?!f4*~>bbE>uTV-faS2rtG%>vG!RGj;1U(Xh7%<x7#x`NJ!%L
z1rL9Ger>v3#7FDjJt&1#s3U%Piq@kzxU_XC8q5svO{S2t^(0CR_Q2}3HCXF>eyWeJ
zukTSdl{@^0EQ|@{OUrGwa_X)1xEV^66cGJk<mIoO*Koe2f^}Axx)o7d$%ai77Zw^K
z|Fm<pA){<7bJfZ*5g~9qQi2q41&fl2)z#JURTNaG*WMmQ=_6ws`AX+0<uAnm<FI}S
zi?}HaLS)Z#aNNREtADnx`}U7jJ1P}yeenc0X#yqmI_j$39y8%ge70y8&PWDtJWC4t
z$M$-n?{mL8il`Tur@Oeil3qXEv1_e6^1BPrD^B^!TYvc&tC}M$aqom^)dTDe<9UHC
zJf^SGBg!!D2tRb4Urko_nSMh==x5Q7$r{eM0gUXeJQloDb4@$tP$EfM(<&tWY;OO#
zZhduaq#bS{TbGxY0SQPB=}@=I<QO#Ovo;LjQ``4B-i~&ed#tfYq*8!6Mdvyu+R|~H
z)H-_^VE5=Yu+E2Vi7=>)v}>|U6PWShNVvt!PZ)wt!MU+n*+d|?$kP&v+#c*+#O!*7
zMCV4!Ap3JDVy*7o12{Zss>XL}orw`}qp6A}K7sAnrz?lfxWwZ`s4n_f-W9Wz`-5_^
zf~r69lKy7^TdFzwq37*w=$Zh%4t?khcB!wZsL0(;l#YDi$5_$alaC|7CA2-&Tas+h
zNKeJ>QPp?){?dEZ$W96NQe71|3i`yC_al=8Z0|uv`Y`hQQZ%E)Q3AR?>Q!m!2yF1k
z&p*FmKS4Z>|9tg4`0hRhJuRH2^4A+{*=ebsq^RYk?A*0WzNa5Bs_oE+eU(*J+v}ff
zZSzd-3}7+k)aikS;Rhx#7@%5TKhJ(<Fika@x?zh&49#C_Yvh+<7w^5m`lODH8CEP3
zS)k?M)spq$k$U&T3=Gi=Ri+-D@87@ICHJcGoiuU;nn65mmG--@#)7rnnqY;10#%)G
zj973WZn2n{7|P-{;__V^bdr?xCgd_`>BJpW){H-&x?e6SHtu^}#5+yu?G@_u{xUl|
zTkJ6V0-#^u-BKh8Oyu?V?|;LQkmBIrU~Y3>?mgf!OqI$oHSNr`oM}Jwp<bc;{L3A2
z_L)@xV91|hD?G?H<hJ@;HyMB5!tIqIDw6ZKcFFcyncHS@hI-KpP%<Qb07=MC-4a}-
z5qRn?f62sQ2ZX4QAgQXDsd+8hjsF_%JB}VZ#2^3NREh1@1ciKgWI*y8{9}qrwB#EJ
zV*W~H0S?WHYx{-nTy`(%I-^zQQoR-V>{$#-NYr`(LqFi;0p)o#nC<<DvhyJ6Sv*!O
zKI|hqKffBEMPKd{st&)EU(!+NO@zP|!~DspJMrL9QKDu{AS2s?r-mc-QRVUe^76qo
z81gDj_qi&hsbr}YxGABdn*@x{tZ)ioG^Sr!PW3n@%mxW?_=KacyE%|mS+1u+l;Np;
ziW?5Ua<=mz{&@2Asnn|mJOUOxQe8c`Zx>)??$UHWk6&AimP2+=U!+3|U%e;mxhibM
z_l7)L^Mcz>AEhD-`^6K(Nm>mQKwKyaj5bC`Ysq0{o()d3`z)-Hcgb%Ebzm<bb^`^t
z`lLKs1a<=+dm=cIDXI45ao*if6rWyPjuO4GBqL7jGp}RpH0Q%F-unZb&G$%Q8%6pD
zV|_}P6;lF;BB0O|2uF%$smHr_;>M6xb(K2%j@x!7lWLWQsSk)Q%*~1OUi#R(emZYf
z`vkwu1@HbaM*p4?`%Ew|H-7*9%0zF8uiMtDLB;4}unuRWBkm|pjgKb}R>=F<Ul$c6
z0}<qv;$-R-+iBQ1-_dq4m1`cO?hFn0ROq2{zqvGx>w!8$xzJKOb@YW$wr=%{kPtGB
zkdwEOfctFa=tlFunCmw}J%&3ee7z7E6O;QsJPij(nXIcfRON11y!A?_swLNmOQYOP
zC^-#J4X+WP!9~h9B7LwKm;{Qs00({+)V|4R4l^Y#b<ihz?W;s-jAS8?MFz+`u&%|`
zQLWRg#6<$*j7*;s0&1;$sMy)jRI5806$a$i1Q)*8_SC1?2ZI#l_;0u(_9b+Oa#cC-
zPD7ECWY%q`#E=Y=2PM><Jaq9FZN_A6kr_+1dnG0&0_VM3_?4U)jN@@dX%}s@b4Dpv
z&5-A8JFZ$Hk!ur97L$~0K}T;KF8prSO|!0CG4}F}Y_=c)1`W@L4-I>Z^J;LTwibir
z3@9nN-CRsn!tms<nDDO6&YU)}j)rKF%pZ@i2!FEv6*m!+OcbE`L;}z~r!q4gGXW3F
zkCv8(4i1hL`Oo4LCtA6B8heVUMaH%V-aarUB|N>0{<BOVzD;w({Yh9Q4|0K7H*7%`
z`XyH*5Q;qp-EJ3{M{>)qXO?d@qs1^0pqkNW!wHya=BSl}EL1C;nYVGyAfDY#Eg%`6
z?EBMmN;DClqTI`_g)NiWIDV?;;5c_1rGhe`nUuk7RPv=uYW=#?N>Nc!YGp1(sLlA&
z=HF6Ir@F3>e)ZYqO~WIeqhBx0!U}{MHeQkAqJ_kjft9|bC^**FaZ^DdfB>yfNcWO>
zN2)PJNcaU32_^}*i>S?EUfn*jnIPJe;I^4a<QyHj<@njKGk0GD=|C#;^5e&k@!6>O
zuvwG{Fkejs{e}~`X0uho;y$xfKKY*dgFI5ysD)RX;A?XMA-KY~5OCD(>^+y`1vvPf
zhhEw9VDi+0+Y=ujCA?ePjg{H>>`$L$&#4z)M!Bs-c6N47#WdtFe%loJMbbp833Bi0
z_;q%{*RL`6`?>Ml9|*IlMkIZH_br!Zp)K5jv{Ak|Tf`*{D{Dc{Dmx}>)BA%<hYlWW
zDc`0zhvCS{b^ZNXNXYZVqt;@YhlEq)UOs^@qyCz=JBV`sNO$;aEJkm;1RKi{6SV|2
zBL+8zwQC~<3U=>3euu^r*RC&uMfg`&YaA)#j;!AYOFrZp$+y0^E`huI<45~+Z+dse
zUNP@u)Q*z3ZZX;7(vJ@b&ROscMMi9b`-r#lmrSkl45Z#nB}@z+Sa;f>#)#EWAZC#Z
z)40E}mYrc7)*fnkrbc;gL=I^=SiYw*;-pWZZuP;^)scbt&BMr$L^fthwcSgKijslB
zs})T37dj!e89W{CNyTuBlu+-tRchSIg0x&5Nht|jTUr}Cz);1`0A_hfrqi87Y$|Z$
z?bIzK{(sC@xa%MYo>3w8>YtKKYm$?pcMc;5jT9)q>p-Q-7Non0;Pk^qmz4_@i|Y&H
z>3|eojvt@Wj01hqnwn|H8{wS<eeOid_^|GBW$(rPSiir&d`}Umkes7zAD=@8K?i`8
z7%T=|hGZ!(efJ$KjWWg^7nqbI1LI~xPO6Nk<ImXYH&u7FH%t2zu-ev)P04WH)~pSp
zkDJDYrI&i;lEci;09x9OL-E)FYLaJ!0fj{k#&madsKB(1q{PrH(Tq}4O5{h2mL%;k
z-(mdl1-eIt)}zv3tv*>Q4P};Vrud3PnHCB;ch83!sNLRo8UlulR>`vEbtG#o-~p@s
zI!*{VDS&9@OqU0{nK<d0+ktrxfYwp~1f*Q^JO(&Y7JS7;qg6Ok-?>=W1)7V!%uwhT
z0XDX}3#tz)@4i}pFtCuXU9lV6{_OaWnpm;xdVZ8+LZ0F~QVCKe&PnSU!#74QF0TjK
zCINC*AH3Gb>h7lHhDc69AzjzqeH)_Tf^`{G{hZh9-rYh_aGk5RNiFQ|U4DfyecQFr
ziQIM$fSzDy)z~r^N{_jbdXxDrAo19qUb@xWr^j(di7gNH>t3>AibAz<_Cs$UN+6uq
zvHZ&5;983pa{#qp5t}@A_;7qo%r6yA-31oPsG$8BxBcUn`?oK<uDu?~U7qt~pkd;E
zZ8`V{D9(a4iVaYuV6S43Ak(zba*x@1Rw=r;&eLjg0T-7R-?GodaW&~LbM@$!Hu*KD
z+Fyj1tsMCki(*Oy+iJ88laUejf-UIr3MW+3)+ugb96AY3OJ763ZguAvWOn771>Y?N
z3zsVQvPMjdVM^E?2R)IN&-{2B?&vS4Y)wzyc&)RhZrYWrnjKHIJk_3N(fn)aXMfaK
zH)pBc-RYJ9S`s(754}(g`wgtBW!UmD(GX$RFh#l5l6xVE(dMQ{EFL2uAzjXe5TRl+
zkXio2cpn$%ng(lJm6j_e)w5^{{)U{k9Xq}WSC9YU`FkE)Vvj2iW`dYH+)ms`&}1lP
z>n6uLHzNt>(swalOEe-S7zrm#v_92&2M&UR&E2BT*<-lKYPfjX>0`&m&!G0W4L{LV
zFIi9ZTmp<znM*Yl{UwKxI*>P)Za>ss1**Gu`X#)tf9)*a+}LP&@#nqIl}H*irNVh7
zf;Oh7^6|o_yejWHFd(isWGsm>H%xr}mdjYh8Pp*)O9vlDlhKd3%*{|yI=cnVqLVwh
zABL%Ecfa0fN5{ZFU%tD*rrwWCQA)pCoaVedl~4<K)i^}5#v2TR_A1s9q^5gl8@VaY
zQ)AZ)+@ZRPcH_;AQqjUfl};c|c-f|L?^mpU+47Z`2Bz$g{m^b18z~ysfxhAtK;O|Q
ziSDXN8DS%#aC?CNgn`&$GQ<+MpfOe&#w6StFt$?bK93%KLT<4)7y$6|@fZ}I7fa!d
z?olfpC729qoaTIq`{e?z#RsL*k^C=_>csPtb5uW<p$4c<Nwc5UOxO%~{^01jqh8ob
zdc`g^hlj3=mz9-;E?v^&j>`)V4<Da5MJNZ@^{h1-H~u3AKVlgomNYtvBi75HTxha7
zcO;>D`E)X_qXY(<rAZU#=3+#Hkf>lhc9`dew3WKcJ@odbRAoB~DCKrIp9P1yCTR1D
zIg}`ehjziHss)UjNMcE%ppcMM_sC*9C1gJhma6LN5yZ_>$R-mdsN@<Z=bR|2&Uo_e
zMd@Q;7J<rD=)n-2+gp@Q(BadR-NN#+GH$4S!TV^qKVH}~*lXvqZZ;IZWBJVS`Y|_T
z)2$&KI(vh0%hYl|jy;V8td`px0fVJt4!!)HJxdLirXUb`)R*!2T8Y58o?t&MJZ{C1
zXyB54^MJd5w8m}8=vl;{iM~?G@_4Mo8|FSOx?xOx;&u%#w7>g)9fA*%W!hs;Ptk09
zFK@R-OAlOnbQsK~tc4ZYN@zE^vFu9?VwC{--8N<^!9*t(PQk!rp+Vr34T{?MY*?UR
zA1Wod*LAfWy)kt2w9%XUzk3W5rH*$uw|UQ(GG~sV&yP?Fs^uC!AIwG?HI7Hh@p$#S
z?iOC$S2^MncFLBP_fqrs?3ENY5<`I6S8#%XArlqsO9xFY_szV)Y@C^nBbhgG5b6LP
z^G0ka_-XHy6H|M2_fMmZ%Km;4sj7PxJKunYF@dwB2ieiV!LTi@F>UQ%v##$~9RQB<
zMmje31H+xE&Kyz5<Ro5Ybb8m^KvBA{w%>_7d6-N@P`t-HBL+|%)w?x&^8hm{kTnY}
zIgAp<oO?yAU!8jRFd&OX0`Xy@wLd}49=aEgVZ>lD(kny`l|YSR8!<R4CAaacC3RI+
zUe~MX;JvU>K~)ug-pj{_SI7fVCw%|Tpm-3B)Ipwq2HJGFWkFjaWI=MmLExn8(R}gS
zp42O8*c%smKE#VL7>sd!1qRcGACw9X-}i*4xPYtHy2dnX`~BlXP>N&{7-g&X2(jO1
zk}BEg02>B2c_u%8{FnxE_$P~m;01|$c!W+;{W_!pi-&`!`$|O-(0SGE+~?k5#}kkl
ztnGO;%!4G&8>32zWQ=8VD}&T4ufJy>yLw>^4obY0j2TDdMl29k-bs<t&n&>YIVH~z
z0Eb&7yA$h?0&R*%^{(b?FumGW%dSxzkK;0Wm<;iT8bW*vLV(|9XOVR<X@P`%O<o-i
zi{-RIaN6ale3*#fR;pbj#Bg1p;#Fwn0tUMUeSQUULj!T#X@JZwG~}-@w%>!wowZWu
zB1AdRrmS8kbT8CfTc3YGwh4I&r+3Bc^{J1C$%GV=KzW=fdq5KZwZ%V<ecR#$kU<g?
ziG1nq{iQBc{=k6)De_hM-<jc=D{;Jq{{>4W|Mx$xyj)$W>!ZfVUIJD&0?9<Eg&;Ng
z+GT#@!vQAAkdV(-IU(fDJ*OexF(}mB+E@i|NeR4yj=+E}SvhpK@*ZJ%NE_t7-0LpM
zlv+scwHKxN(1q6kL1skSlK0Bt&%x6PKO>`F)V#8K(V#({G}+13)KEI*z8{8ykp6La
zklP@iQB2(m|C#IM9)IE~|L5yt-Cy+~Ha_aZ&0QbC2kmS3dbDz`)eQMmV}h%blM_vY
zsp%^fQ<@nN{KBnis$8v$b^0sjZE2y>kx%?iSL{e>j@<F^#;&TmHg_oZexjxCM`<Z1
zbUtSetWAe29fYa`*QDr(&qwNs@(W;+(F|WIH)xzX99;GO{qg-j3tJ8>A0}_ECeGep
zgq(z5Po#qktO0mIwoxxs17ujG$Rm8EHROo;PKi}-UcGvCuZZx|$B$nb-CwTAwV&=g
z9L#k3G$E!mH?MY=dcEBrI(})f+oD?`{^o%Sv+utD-Ut&7XapUyz@-oZESwZW;HJne
z^i#w*iS-cdix}7FJb+ja*zwKGMutX7&|SHt61OeK2VJ>FI*K^N+TlwUuT<dB_)?+0
zyVSr}doJzSv(MFQ%%_H~Xt|eiOKom-TO==+s2;5GR!H`{ch>{ZR+qvy#>jezE!G{>
zRqOw0{E+hVcp^K}%)!bK;?d@!4^>rUl!k=b1w`2`gaj_hy?3Z`=JOUc-3R|X7FirE
z=j9*9Sk5i6=GZ<v#I(2eY1EDeC)24Z^8}7kLg3=Gf#w#Dr*WMurBiVM4V6J(+}t;2
zJ;%8Y;<Nesdb_#bdpKh`6t9L;n#bJP`tdoyx2e6;)YO|9fzO9BQTv&Otki|BRgLxF
zl1~FO)S;LOmX0XIBKb>y6@vst@d+7WPoTbPrPsb6!0uC~L-oPz(O^IPiT}k54Ebzr
z%*&j(Xn7e~9-kCTXw$v-sL|sKH{S0VA`fmkEa1ljpFO+dkcO(&xH<kYxT#;oAP^$t
z$cvaEWH?--h%7d6d`lwWLR60)pycGJZe)T)ra^s11z<!PW@$d3;FTjbKZMSqTi%?`
z!Z6|{W8#>{>@+GWJnWN3#Rb#&O))_D$7|V-(PoI?Tm_zYHOP+aE)e^78-jx%w7_q4
z;`Hm)#<L@Ty}q%p)@(I~?c~WT!0E+p^*ftiJ~bH08{TEey!g=E{w4QNVUuWbK7xhQ
zfUoSNHt(JJD-9=c^z7Q1<rC_z8Og-GeY~8b!j|0d&>1SIiYrBwR0%Gn5d!v0&nGCI
zI|Xj9LKT$<VP)zZi~!Fw@3;egcON;dK4|i0zRO2fRHh2+=eUFt;r*4+mLAPPx8TMO
z;Sy*t32-exQc)>m^V*KoQ3C?d0s;AyAs3JNzJCew@O<-LWBbyvu@F&V{gao@B<Qi`
z_`ZPAzp1=yj_=I;aIJw(^o{P^zCHfFuXpWw;I|dkH2X^qRmU`^#1lh_a-`-08tXzr
z0q1VF6=q6DWF?n%Iv!(Hs!LcKKZ31`5edeSJ0@q0j*Ohq($a$XCIyr$q$eRuQ@yFm
zn&YPOze=2f;RuIO)lle*=%s0qXP@U#9VU*im`48gKGgRdTUxw!Q94H{OkGo9dP~)^
zd)$^mXsn3t(wry2$Per{iA`JdZPQ{r!0~SZUL$|{zuOh1?(o8<b@_5XgF)B^$U?_8
z_=D!*GQ(rZR_n{sz6KEyB@M@C4WU)t*2By5aM_DrJ?_3XUJll#5bUO$1|Ldnf+q(U
ziW43OX$l;2RJjb?f=o-jy-$IUi>DENZQmRg(DT|+Ud!dxO&o-XiDH5jg~0I1VdfWj
zK*luz)oLYn=|Gna0z(=MIU@zy2Tq3jkRkpwlBO_}h-g(M7~TtyqfZB(y>%706a%Rk
zcLfrE>ro~AaugzKZ>kDVX`sF(_|gKkASM}l7|jXLaOq2?4AK7!)ccr5^w8MV1lF#c
zGPzCZ+BMgd)?`}lcbLJV`!dt*_MeER0JAScLpt_ydAaB&xXELrtOlm7eu^La$99az
zJ`(^oZH8C3$MC&-L5InmoNpRJ*WPO8?>8<pS)LLCQ2GZb75~8X^>tP(?HXcJOVX`t
z6~*?4zSEEI=;%;rFM@C>g{+$}+Cm)7uQ_HQw%a{+eUz7j4l!Njl{#V)CU>~LrxL@X
zeDin`852=3W^G>TF3CQ1S1td?edn}Q+-6^xRoB%CXA~?(PC>H$%7`fKXoE%@x2HYh
zsi~<D86<2^<eUzmZkir{%N9EbWX>$bB0nnA!YzCvQCa=EAEH&tfm3~8p-&Be{(RS(
z7QTRI1qIa!T?mBRhR~VY73efXT-sOL7;!0_d9C`c*ttF<m+APUnb~<3k*ghbe$P6>
zzVfDvF)@5_U5FWlXfV*m{YG!}>wyexzpm1A78VvHgNn&+m&0&hc&6INb>buz#$(uh
zGf=qvkU)j=jT_}AdS6yj0i+7JZuhW4nFuKWw>mGN31sd!{aWJ1<kPjb<Fs8CVPr)x
zOlf{2s1u-{SHrMXJSXm_lbtEoy@J*n-OIQlOnDd~$@>IOzXf|4mTJ7of~STa=})IF
zXB%Yq!!w)N-Hic)r}r5;w)XbQ2pNjtg@7I2Ja&E~{80;=rk=?`{u~pYUt$bXY|S3$
z@TU?b%K2K{#YQi>TNWnQ!?0z8&sTN4tWD*&9JoKY*%K#fkC6nTv$IFtnE$os1cTI#
zc2Z>dc2*fJGwtHisr4>hU!LY;<D(t3D@Sz_-X>vm!2q{%*tUbSvp|{%GzOCX{X!ov
zb@<6nyD{(caeJmSJ7a0Tw*C$~?SOt`l$lB&7{Vhg3Lh;K=FpWZYL`D&HFybh{dvVC
z*;@pS09f&>@lObQfM_nq#>Q?uBUBIrxzja1kBmAedM*tu>*VO#E_1D4>~DMTmVZW{
zdtGH4Zg*nt_Dc@WI^R>`kd1dK`B<R<qAd2QZ_D9X)pa6tUNqc>N%i3c9SbLyHeI=#
zm)P{66q?!$V-(KGJHb%kRwIf1qN8GNV$}(Asf+bR8(=X#h7tGjlD8^W-1p|_?qZbi
z=qybK+#7n{>v2&-CHy_!I49IYzGi?Qq#L>C)OeHCfZl!Bbdyx-Y+s=}ih58?d<*c|
zS{u}!B!|bhTr5GU5)=ZliHTBD`q#US^Mln)sYcLj8HqnsNmt`poZhzBnODb~0hm4m
zU`Giwo7<fl?T}Mo=9iR`e$f3afN8vDB$u5L@-=lp^G0G#3lLbx^V7i&I8B$n@~8zn
zxmbBDx|{n7M`-H8%HLW5tmxlgq0b?Cr&wAAAC6J3x{CA%58jn`#gIsab^;8!di4)=
z4gXQ2MX>VF1<OTh7b98YJyF{f=YG>zTTxj1-FH%93$v$4OxqjtzKSIX%JRT~1r{#i
zVlYuDb6%z=P$^PBZ9_Aa&rGL5&Nua*??AL`eqOdNM?)sD$_6RCAH5rsLH9vpczM_E
zy|Orst<aY#rmHE!pG}!K$&|7ECJ4JuYvUg_V!rK)fdA|YBGnpRonP-zD2Hs<V;K2L
zPI6f~Lm?$4?J@}rpa0g>*V!1T4&saYG1!fi*H5ZI!ip;N+=DU}efdp<ZQ39PVVAQN
z4ddW9jQh(<1qB5aGBt&S78QgD@z9PPJCM;1|E7=qK#IBYfZJ`up=5~~NH32`TP_Q`
z65AuUnlE)x<@wSRx3YDa6E6iL=x_esz{tk7$uxiQ-sgDn;PYmR<|f&HI0NPB%<8%O
z%JL)xEHhC?$1vu=#bs_b>bZ1;<3?c4q6|Si%pnEtPB8`RI?<IE4l>_=!eO5n4d2wJ
zXR`;P2ZnT139v5>pPL$DfGqk9hH(Y(=#RKz2|oeqWz=i9r-vv(LN$yOoSwi%Q#2Cu
zYl4_lLB77^e?@3_52HUPPSjW24_a|k2Mx>$5l3Drwx|N>^c{j0UXonrN`uIJoHw>=
z6O}Ka^#Nwcu944&8TX|a3HamQy%!uB0u&@A_m&6zy|?fuy+j804vLOZq&^<Q5E4n|
znd9!0+I5hTnU}XM%LV)nbK5*NS0sO)Sy$EXyFM^{#Plv9IoG?~r%Hl@l~W$Dk-!@n
z1cZbb64`ic)#pCTAUDg00F=nUt+QE{7Z(+QCa2W^>PH#%TC#nA=<20BovQulB`PBr
zI1mDU<?aVCv_x)uwb5PDAcX3N9|k;66Yn$8RoPBKvi7LHSU7F~M*HQK(Q_$ElVTNf
zkUklZwjk*vB)1bzH^d^QzK;6FmkT%xj-lV?TVKx2Jaag#MovZX+kCwE`_<Xc`Hb1z
z5-WMuqZxZe3V>HZ(L#mcvq?nk85sDCWs)QMr*JArPWoc+<ls83?eARrP-+qIN3un^
zM&Q>*PznrQZcZ(|I7%R*JsPhwM7Q{71)V+cd0~`j6(SXdFgm*ayu9U77@V1zsj-Y!
z`BZ*;w@S-Sgwn!i2;vTnxn8PtXW+=jTdBQ!@0i8ne)Mn14WsjhRB8|($OVx>{uT$V
z@;$yiJ)5u$blykJ$=y1Mp2A)m+VNpDwyiCYsGVjjeF$Lp-JhE{iMI8C>LF^rkTwMN
z5>jYJy{UV8${FfS5bw978nEL!zINSfcalPKGvvwfh>9j^nZV}I4uc7igZ!Ai8!t88
zWFIY-FT9KE0d|&f%VhbITC`2CCd&1_(>ug!o}Z%pzjl!Mw;eR2Jw&Ys8u2`?W$>51
zxl_3N&H5Tajqau71ums==#1nAsmna~K0j12_*7bJsy~S8rBk6CS!hi#`>OW<B^7-O
zy!1yu314zvN+ZN^ihUUxx6wV<e3<O<@L>|-L3PbRY$IF_mG9LH)>X{=UME9AbB1+(
zcJ?{a4-J4il?48$usT<5P+SI54ENgR%^uo@7AhZDo*XA`=M+IKypkR`D<#Me6P)Sw
zJx0MnhSTsksbyqTA5z_ztIY)YC2c1()s-g!^hXhuZm!EJpVE3wl#qbPY2qHfI9ZY%
zhoq^{mK+2{a%)K}5KB;_DHs>hn43X7bDOa{g{BzT#>-Ig=)m+C#=UT8&_kj8?B^k>
z2&xm}QG)fMLs#@4_nD3_H^o(5>=n{$tNQ)-9fU9*Rg{4mADZwGU-{IJ9yl=gX?|vY
zULKLxFHn_jb`3B~`cxpK3539vV2UAjHqJ{&tu)zJu6p$?+6M#AYw%Z6#a+94wIy5c
zr_?z#2&AATAT%YKGZi!pUaEF2ih)b5)M-il)pY&Zhw%ozg|oPsyK^-`@GF4Iwh@U!
zEfaeFcGjJ;ngC`K8m`jq6<l#fRty^-uK#tvYREmQcunZ)5c&?2m#6!+P)I5bqkFUo
zastj?=NoDl*H>5#CKz(WF74d8(`N3AScRU~(Q|&87F&mz;x;~eT_1Ofz+4qE@t$Ri
zXu9TEjI!^31Z{%AwD%{#Wk`WFJeI{lf)GuJVxc<fs*t}OK72SN?d!Wgy}({NXJ=#g
z858^*hG6lU_uM&dQo7tL$jK>3$i~zX@hOOtjuT|&B#Dk0ZaPmJU`FA66%2~Vm(f&*
z6dMw5?Rh&Gr+!~?@i*jy&5I7FPMsp))6fsg|4P0b=un<ge9bipo@MI=WI!mWNxn76
zwiJMpg)iq2xbE*>NFuw6tUaULieI6%B*1hVR~+|=4!tjEAj1C2r+E{Is1IUY3eq5|
zpTB~^>~k_HRCJV-th**g0Xs%*k{*1GiAKz{8c|>RbiLX#juRh80n$U&Sliv*ZQO|^
z=0<xgw*~_?skqVzq_Q~3zv1(8eQWqTr*c8-{Q2{{M+>gHZ!QMos;BOy@`>7Wk%dJZ
zO~1;rva%^;L;)UoVJfZ)YvYg4VkdgLoi49~D_Ml$F|9e@ufJYJSmdNDjMV%~jvV?R
zr;^P(-d?g+2}bU+*fHrfB{q(VP>gX%SwSuEGun-*&zG#9Og{(ufbl7VNS}>}e1arz
zy7P9`b^{$1QbPN%HL##5DJrk77B3bwT}r3~>V1Tk)+FSiI}(YM+wB{1Ek-2oA+Dod
zjH(;&4xniv-jA^&tp-V(d02$S2k%gHu$e{b4r-QfZ<T1j9+no6z6H2>(!9#q|AcOk
zTTL3U4U3SKSXEL2^BKAjbR3f+YtiYqxA7%-A8`Ey#vwJ8C_|bovdKjHIR=5S(qn;m
zfkRb@0%uA$te8?C9@y?{G$*<>3DBw77jU`N0b~a8aaF^c!^i@1o@m@8E)MiD+K~3_
z+)YJqy0ZNlY{?UE@4A3#YNNrgLzxlD?l2?|M3-Oc93;@G1b4G2C*i|qJ8@X78NZfc
z<#@%rce%RN!AeADHY9#N+L74QME8=?p0(5CkC~!wt~u);SB70bIqmbUqh8k$&O_Qj
zOsDVO=hPcxw&hv|RZaVarD5z4`~DNLD8hJp?2yUst=hcF3Gj#dJ4#Ac5E^HeE4WLx
zsED3F%nQh3X+#M^bYuV-O6a~vMKAap4h7#v`M;g*=tYq&+^@P0h?ss%2B{>Y82D`7
zO~W)q<}d+!A4NyV1r|s$<jJ*|uS32}1Y+n>i|&_P>(Tv0r6r8PIq904>02v9k2J*c
zrouS&o@lRvt4oJB^#@B;L&GGv&*~SNVn<Q6$n4qkA!iZ#hBnJHcf{1P?);9fxb&J*
z2+o`qjUkz;&+0>FxR25w5;l{j7wpY88y01kI<j6vONI=a!-MGeCd7jk<e~SE{e6F%
z6EPU`#D$Rp*~5OJQCzo)#SP%(@SeBp0~%ZFW+K)$m;3j%8?|Rdj`Q4(xxAx7bsT2w
zLFRvNe6GL1_|}<03+f<eCnsYl$bY0N*ix~BIK>I0KKGJQSXV8aXnX`2tle~9Iu85o
z$?e4GHdaBwo-Fi#RoUR<>FVJWpx-72!wT*wm)oNY3?fyT_N|6+zD%&QiM9E{n+x(4
zbI+drY}U7t+FG>)^w|W`7SOT*+NIthg(q1i;<Z=Dnsg+|+|Z|FZJ-gvh~Gm-n8Um(
zD@zudo2CisFO!q$j1pxEp`3bq$>%hR*+`4>`g%uAtgWp{7Ui4ziyQUND?p2Fr$FJ6
zC=d*@-;M=ph6Ar!C)AN+=K>Lfyl6P~1j&=Zhfm`usAn)Z*R|Y=RB+Pd!S^U2-L#$R
zQ3brvhDIAX$t}!=d->?m59jX!|FT)S__`bl`4;Z|IfU-pnws128Ikg+Sb%N{T@pG~
z+Mma1jI4U85pw>0wK&}RAsbSDXCzl{LKYSB*-k@Uo#+rIHqMiy=hiM)IV_Cb`bL{k
ze_(qlu%`ug%HCjnT;}oVP;K?j%~wq&(}VhrKZ&KN7x`(gLU<Imu#DIgD(&5rXQEtx
z;pR<Mhz0PRx^3QtY;96r?9F+BJq)~R+-^Jc;=QZclOdJWM4z0)?A;Qd@tj8eu=8ZF
zJH=7k$gD}O;Y4!!pD)3hzaV=ImlKiQ#IG^J!uZ7_l~G2Ub?BfIh?rXnEn<X%7W_?3
zv`9ITS1xZ6sf_Ie_r4SS?=3;Zl@MYs{+JFWpj`==pLh-DT54<8yLu@Mh<uC^Aw??O
ztqJnb05~M@nD?lFJmTA&aYj=Xm5reOgR{N8y|^BC!%3JKsJmZF%$17xP^Uzh?e|&f
zP$IQ&zq0TDT~WbtyGmsFOz^{JeY7Wk-g)xiFAIIw4qUnX<j2qAukP=Bu`?)dYRbZu
ztudpt{kq2Y*Ta5**}MO*C$6&Z*|THk!-e(r2TaeyZ(AMm`*~n<jn#Upg^SBzBqCxy
z5?78fq=jnGRW*}HfzLjvKue~8GhJ^6^Kc93u-TVwvyDh+km|piC_uXk8TU&o;GA5y
z&D~;hC=<AGb);^v&jF{>P+nG5jP!)VXKJRHM6f_Jdf~}6_4R?LOCkKn@m^+~bU<4E
z669m2xu~32<?x56V>iwwqComJr_+=t6H>Ld42?KUA`l1k%`VMw;m&<@eYu-vIHQ^L
zh}t)8S0RT&Fz-*v#$CA)dElfcdy0sxUa6cQ9Knu=%g87@ITa&MRDf?p_}dPzi9`@$
ztn<PS4i00Z(Z{y>?W8fkOdene8o;+R{h6Y3=>s%+yB`n+6Tl0*_cyL1-s^GG9HFCQ
zlaXmm?b38}D^sM0YnU-;1x%-7$=HR#?Wt=kL%y}Iw}|l-I7|7CLM<SPps-XH7k`3e
zoyo$2{ZCKNTEpB;p)_yry=X%sD{7wKSQ(-tbYc2M7f{JVav+5(d8K@5moh=wgEmj9
zw}rmyh5GtTgTVCIY!yRJs4wm&+`x&1)U3kO_w2=sH;F9C*#dqfMi5c)^*9#aB2Xvx
zvXwvnc#!_U3cVsnV9iHO4OGn1!8{`m_a-Y3k0KhW?0koD>4-~6_#**^IFT-B_J}qN
z?a^bCnEuE6!yL!=qCieXda5>JD-*SG_Sgl;WEl&oCx}6J%}8|9g&+Q+vDLrw;<^Z{
zkdOxDe!6GqwL%B?*ZkWz+pY{-#5>(^R4mw1Ze84Pfg``&1Kl#rl@7b0{TiZ$GiVPW
z_WaqiNs<gqMxEI&iKh-ahY&E&&Ca6pKnHEA#)<8>WM%K<WEfpIjtauG6x#`NrwSBh
zEmw7(;S#`JEM*3Io@yJ3hF)B9EKy|#)&kSD%HNJuiJ$;V85=7`$#pF7`SX+GbD~$a
z0Q#h&eBo^;1khgNP@v%!iZ*L-UcbL%qC3$SAaY7ik04sL&tACjX=)L}^w=vWO<Kj`
zZrsCV`}HkPy?ze8^ViwW<HD{^-4PZ*dMh_aA_BvlYRuQgu{tb*RKRsoP&XnSuzUUR
z@0f!>&7HoZ`0l<{h=6?*QmlY_pXbfPG14FxdEIl471jk25oEb{`B->lDjmG~87De(
zJW2B+%RTc>!-3ncR&PVv0p=}Itq~zVsij3;Ij{gb$7aPDEvZigG!T%EC6*%tw3|->
ze*>jR5|DMZi6w|%5w>zu`8_cG@&%)W+bhQ?jCDlIq9G<c7q=`%Ab?`RTqS%Z6<QtP
zDgFmi0MqiG!s4S;pZD(Fo3fx2#bXkL&R`>mCNv!vJ<d~QE?cp1&A&$5h@tf-*E@G&
zgg0h(h1QRJ9{ApeKgb;);J@cJk=HB5m}J!k!C1VOo2n^amKJ^hLM;i6MmQ4?<wat_
zZ50(2!AG5UE)X5*SFXG)I0@?W{nVYoi5~iIj~^SzZoXNUGudr(4NG>UE|VM2+z-v;
z_5B%iX>>=ADrF2|Q+<N+6tliIYe%MU#NGOf>S4D<IV<QQRr9^*u4yz{w;&BsP*F+x
z<By%5%NjV{Zs?Y_n!Kj19SdPBaTQeQJ9{=6D*WZXa3Z71l$VT7;(Qtvms1gmw4ME1
zOME3ej?o2{2hOq;s$oRjYgoQ$l$5Wpu6CMAWYp;tZ7%(eZnQtGtgTbCY|D_GBF>&T
z2Kzo7CDjRb1SO(@#LR6Vi*520ZuWef0_SV(Tp0;&avEz|itY1U)+212Lk!zl>pPwx
zt6*eg3@naHOJnoA!UFqGuU&II#)q{MDDL}hQbAC3h6p8~`s6h=qY(b+c1z?gHhm(O
zYITCsvn8jyn$g?ex^3S?d6_PcH42X$vG~=^?lRXBe0WMi1vA14*ek2sO=GSY#1CzO
zP%=bQb|QU{YV`-0L?ZT)a5POv9OdNX{&c6XUl`+nl#IMje(PU-W3rkzvMDHPMxTqG
zIcl$D-3C-5*P_3S^Bh1klXTUb596!o=_+4Cmt{@vQ)(`K!<v99UEc88NCs$^N!O^J
zmQT3AQMC2#1J9b*>Ubhu1=BIOm;#);QKU??PxC?(K9=I6jY6GJf?HWx)s*^Ro(AgC
zq7{>-cCQqED%>BLyj2^Z0Zf<s#H6HJLAjZ)%*{BlC(^sE9EjxCE1!S;_Rh0vU9008
z)ANnxpMX)b<f;=N#8M|o+U%%YYo5_19pZPirWPm;WM#v|^(jUVj&q)~9{Y3>l892t
z+ApJ{CZFGn?e~4jUqI+Lit0vPaa9c$o4c=17KoQ;mSOyg(ArqsusPF(@cOmo^8QcI
zTx6(rUa<NigbOxjy`;&I&6eUT7S<MhLRQlicq80EH&cx*95EU`*J&|~c1f@|34Jy%
z``!E1M}{>qz}DEF4Mlwu^7Y!+7|A1~WwZ_oU(<HHSrMJDuP1CV*KZu+TUBU3Xw?hx
zsam))0S1Y-#ECYh8kZ0s2I0`XXJ*lRE=77XGi832n&a*lMGVL;npY@yOT+IQZ`nXI
z0Q)>IFqw25+|QQu{?%VDtY}$TWfQBIx`5rKdgI28WZMZ=kv?MyX=$IerP9_B3mi7}
zDJspw>CUiM8RnmE|H=97zIuJ@q6b&Y=6yDOS$lxx9&y_XWSNAyCNi3r@ecp~;uG3Q
zvGejJO!Se1(SWSJeuDfwgP_Ar)c5D-?`OV#?E-L3VSBxN+p5si*f<3<$Zx?Lp>pb&
z&k0+)4Jb{adfL>Z|G|_uoaloze*ftCk)Q$`I7MjTLW4_S6@wiF(R_ZOV<$EaUM{!p
zLHT57sdE7uwO`;W3Ucg(^ezR-A&h03Z5=HXDjgl>suOJ>88g238uzN5Knwgx_=>63
zr-xgBnzew4w4%%b1`r#CJ5QYXo5fPk@f7*+>x$S)=wdCM=;W%_zJnnSO@bIy^&1k&
z+`3&F`*uH=dOd$WvA_|6MI`2g$%FkxEn9Oc2*g93mL!`|z($0*V=opXyu<WWal{Op
zDj@a8iLo?1;M>@F$#oB2lA4=aatxYzs4irIS|m>Nxbv(y`p29weg~QH=hQx5<fw23
z5YrQGM?dAKLo$-B(9*kKi$+W{E9gytF1{w&5x3k2-{=^~+mvf{s4ooI5mr{x47Jdu
z@&Jkx?@c6{4zQr$Y|V;x-QEDb2_ZsqpTmOzcRWVLLH(q1I)0m*Vq&EMetvQzPGe}#
z%s?;Wd_uB8fU@m`yP`&8Bd#ZI?RORXMZE7wVCF8CO-yL!%`U%qPz*+BXMUM~Es*c$
z9;hl8;v%W81dX7uo**S=_V#BkyXnC)>J{eg7}UB%N;Cs><8hcFj4V4N4c<NU1WltA
zR1{sGAXT0!=AUq+Szjp<xJ|wO8sbsS2^GQ+%C5T>Ix|J)s#!#KjaJWp%X$hA{0u$A
zzL$cLH4%YP=Dp(tEGRB%nt>d?`@|bO1EOh78GA$to4)=^euIsY^KhW@VcPD?uonmu
zbj&7>zANs*HH<A+M3-S;NQe6N=5&Ey{O)};9qLucK2DhHV5Tp8QJTEi%ZT;76v4;N
zE`y?6Zs^0FBU{7cNFtK)7>E>|s5|*A%)Y-5VpJBc7_D)lGO#J>&^EZ0(+N)+A48lq
zq{X3_h&?dlQ0vr3q%$ikw{7}e<MPl@?fGEi$De-6gKiotaZSki3^NzWZB+jDgDzHU
zSzE}ILW7gj<}HWU!qMvtcj6lcjZt~d(+0X5j`iK-6{jin5yj!gXD97DHjMK+P1}gs
zN3o;73J7%T7pFJWT)I>=%tD#*VNqRLPd`c-cQe|{zhh)#3g$msfbte}q$0Ymk#>ZL
zpZj(=0`jJGo$udv+%4aw!!8>X$1i1ToRd_;d(Pl18e;3i7>Sena<@TaZSA+Fg*4R{
zM3-&DIhugy&tvuL4=y%Kuy>j%bA;D-72b=3FB!_&{g?7aYK*B^EM}5eA;3}wbKC+)
zj;|ThxbvNGm9^%X@C}cQbnV?xQKL1zal_-_!7xL}k)#W{;}fIvt^4^im_Tw%aBwUx
z;*w%Lb*f_UHR519>Xzj9??;e_2Uj?zrf3W=_w%s|Zyhbgp%j;rI%m5T5kUtZs6^wA
z3(^cOGunSnRsp*pf+@ySI>MRh!{BS;)L|G-2KIn4a&GDL@{~q-z5L9J&g@E~t|iTg
zSFu&}&OO=}9s<xwwdlXigWR`d`F=V%A*CCo(VQ5{geGm-dW5fWj94TU^t%}>m&W|s
zc*}T#x%Xbx&y1(JoA8&T3NiI4#)txGbDioFX7mg%Y$=RvSK)wWhz_TVDl2Wi<eXSl
zChaG^cKoRqLr`DlS9}>6L2KHoF@|3eb9NJj-&vlUpl(giP^8|ZsUgv;wvHyU5%&RB
z0yy;3iZyR+1(b$FJ7$V@#l_Tt>3+BMNb{nXuaNXelvI8BO37jBIQG^PSC0&e{_5oW
zf1+}11NhOJp|LI}k|Y<nSyQvN<A{OF#%z`NO~V%uz6b<XjgOBzO(Z8C!I1*Sz-+sP
z69cJ>197NcE_q4dR&PlrwUoPW%k2_YQe3^Qy0`#YR0)H|=16$zy6og1--~og@`Xww
zG>OgHT;Cl{$1~AqvL;E8o&Wh7P~-Y;_wLzf>wz;z7#OrRmVrN3KTB1JyRmO^s#gNI
zkH4>Prk}rm9?TnwJ71j~enFd%cBD0zuY8t3GegT@HlE5WT;4i?m{piLvDm)dKJNO%
zPd~{cp*eg+Q55JpzxA1Gh*uiuUS-YmziX?_O@j}AyEXl`3@S2Cnx|capxd<b^TM0S
zC!f(0%WI~_%3qv;L_8okI29O%$^6K<K$?K3^Rh+wcWDCycTyK1k2uSm+`i9M)8dO&
zjjoj<?o-7Ab0MPYtg5;V))DZ7Gr+tCIbQ-8w7g+!7#{2TsMzXyfsta1FrjonA*F<p
z-}^=!grNxtXvQEor8Ak3h2JhvqdFr5-!Fm~xkV|7@OSiF80(ocH*o)nOG~#QRmpU^
zpkr%Bg)CP-Q&S9~?0G?fFR@+-IFsP@ipw&=a0Wm`hDh`U4qacrO285#35dUgM$0e^
zJaBm)Bi3SYP#cZ9ipVVp5DuSMYjI#LTfKmIgV3K4hJ*nD{%}c&Lm!a*$=^jXm*;Kb
z2pb7RN0?pm^ScYngT`#fwUSv&rS!hCGFd9T?PwJcjA=zXs=x$*=ElvZub`IZ3^hK>
zH6I}zCE0`rPT&aV(Zpc>Ywo^VjcNNO&nP3a&O}ow77`MqpAcRAvFKK<3~{fYPf#nz
z6)%;ioFA<+<Yr-J7Q5Ht(D(IkEx^5fM-Ci_MIeA1lmbyMLz`XGB7BU7CWUythY!b4
z<aXs4_=3;Bt-WIgn(Wxy=8u(s`|TkLqQI!A4CFk9;Ha^_Whs;D)0;Iwp<9b>Sz-CZ
z0(z;lv$LzjKH6@oCl;53maTwEQ_)jji_?63_6WNqq<93a;JM=f=#TpoKKXy^uM3L~
zQ2bo@c-HsDgc;E`x44)mt_8`}RH4qJ-eCgswIv^gQ<mCh8v^8R-yKKB^4c|9G15<O
zzCe^dGzpo*E$Lg*1gm1l@sT!3y<s=Sx05uW7Gw6!agbtQ<VH6rrf*+8J>I%IC=_IH
zbn`>O3kndHduXrCUQ0(+p;m13xIRV=m&C70M=g)+-cOeVZK4JQoW=T$TUVfr$)Vj~
z=i-|8pxP3>^vzeVP?P%UZq9#^I{*1a*w*!he&18b3K2LHv>oB~{Z7kM7~*I*j#9AZ
z<Hb|{)rwcHTmiK3s-z5wh>zs=8SkLJe2E>;&ohm1EPd(vU%w<NVef8apZ~n{f4|8%
zaY~hfqLnmKf1BH)&!wcCcJFRHP9!H6TQjx#wPn+R_F-Nv*GGkzALA1eCNNz)KH^2h
z|9Y*zUX_)=1B}0d7i<T0lWBZ{xMUt3u=fwWd<1QQvRIt6iDwhP{o~e<w|9Oy^xt>$
z-|yP@?x5Ha6GqE7<tDT;aE-W#NLH6FT_T`uD9&DUay9xtzs!hQgSaUYf!_27EYl7j
zCSGB{=_<wL|Gv~e-@VEEB7T(O@*<x>108`X5r#=aK5x;Mm;=!t2>g?AO=lmxCEW2?
z85yr*x3;4<bP;2alVW1-*X?5Y2uXP+sENZeqr=1GnZaw=@tOIcGD-aw0rJG}xj%8{
z+&L*+OwTeiWgaisa8myB+yDEGW&QD;yB^f(?y|Ig;_J)41sE_=_phyX`AEusGp^jf
zT=FT@X>-5Lzo4M#=`jrd&mOrS9{!x|zc2PbzKfZ|nfM=n|Ic6DXSw`87wDgVK#>Bc
zkpHzO|M?e5JMozR`LF-+P0Wu-HUG!o|MOS>|4sb86#uWR#C=wTif>;rHzg(0{QS(%
zZI!$@r@7&O+NkNps_tLjBA0otb^rC?-_$={I{Ej9OxgX<j=JfGsn~KaZF)+9xM+zH
zipRx1=j}73zjj>8o-U8Se#+eZ?~_15A!|zn-fv&`Q^wvnzYGacL1Z}1N&oHdVrc#q
zt=IqAc#2*W_y78#H&PkOnQn?*zZc-Wf92^U{37wS_1ph^vr+$i)B$m?W83jxzLbhf
z_bCsOr&?2^{ruLB$}lnZrhNJ0?mzz5>$HAncI~h4`1ra!|N4%CBFTk7jlO*q7HM=Q
zEBPVQ&|*H}z{q^bk)8Ul23XmrpLqW|N|x4fu7AY=M3R(I1gpa5$DiIPoq4yd5?{Kx
zL>3pjbY(=n3N}LusX+#_3#bnR{QY(8-Kc!ktnBUCqlBH8yipCME^-Jj_lOKntc~id
zda(<`Z_N4PDuv}Pqffs`FZXceJMaq#+;-ny=i+PO2$MX6j?<e=(sar<K8%y+j-xv!
z`HWQ95t;2Z@<BXal9YXEzG0IZ<O-}&@DzX4=f1tq{0k@SIm>IhyG8wUd5=xxGzx!$
zeN*-Eo&`VuWqiD70O!?v6`qv2S}3nCMLtP{A|np2Y|p%l8dg_UYS6&srywgEgEX!y
zvfYroroBDWfuD&<6i83jC5xLkL(q?x`s|skqx1S<i&G*ZS{9gwfsC`_?iQrWFo0vh
zFM-cjiXg*O`St-MTZs-}T(y9L)Ac>xagptig~xXI`wzSdc6RwF8YP7`_(woPqC>Ln
zGc|HrcX_)dMsxkBVG8qKa`z3Y&Cbumork`Xgm+-sQ8r*Gbn8|V?9=?cyu^af>y3Zy
z+&kG<dJP3%kF&&`JI~M*nEL6{50OIQU@xd9zElqdw$UFrcu=Y5{I6ov)QPo=^u+HA
z3E4e2|I;&H--5Zh9|OXit|lili%SWOXO+vSIygEqv$0*();<8yR~zsan<Y~Z>1gTp
ztxe~Y+};mJ#RLWA@HX%Yvc?m8&_OH<Z5L;F{gLc__RC@LdB1h}atvW#_WYijkx??y
zUG?&HFy;4u!cI*KAPJZwd9^O);V-(%s!_Xl?`DP(c3+<`VO#=sEFj7)<z1tR>UzB5
z;^sIs8_%9y@XFoTaEas(yc&!Bd7n%(`JatVL7{#F*9Kn%>#lM!IiT|&1IRrygK+`R
zKIJ;B!Gs58sPbgP_WMKbfr+EhkzB{H*C#1?HHymfGju54Je~28BfW4bZ|b{MY(JeY
z>}u{0sPgn=U!FXJ`&@&qJsm{3M@N&dJXi_0x^Gi`zXs6f(3$g;s9=h~`^bojR^d)r
z5rGfKGaK>|_gzO;1()+2d{);f{g~S?!4*(wzOJ9GS<`)UdmK-LcN9wOKo6?&M2F&-
zn9GolXNOq~ywRTc6r0mKxtr4SC?$oBy?wzCQ$XpHz;`L)%1{1G?(YA*wzRl79C`fy
zA+v*gQ`=GiOEWoiJ{)6^*B`lre5{{^d*;W*nG`sW8b7CkryerElN7%+T2b)*(&b@!
zPBP+R>kEqyeWfLfgPs<b@=SGg1Ez|}ny`sKw#{A_w6MTkAHDqmse@96tM`*9ZOBJc
z@87>%(p_Z3ECJ&-k{_dpa!1t#v>_y;^`-0A$tnf|s8oifGvjQ@c4)oy1=~#5fX*xW
z`e>2cP|%#KT7Th%(3E1*e%kBKpNygP`aqN~!@N%``O3TQT%%0lB%*`*>r@pOZipb+
z;B(w&WfrGb%RAA<BX;s+EU$ZGonRs~J)o~rOX#1><x7S8D7l6_0hgjK5yS>7+Hh7z
z5lA0eGy8u5`P-sj+G@&c0<$i)LQC_a42Ih^%}kSOJ<;}kmtZQ8mvyrim^VpACRP@i
z&>LId|6T|`pjTm-I3F;nWxjavw<}j-akw=^wgvkKIh&en;Rl~EF!1y0>i33IJ=0#4
z2P$|W`0llm_~UvPgS+XykSa!j7v`PW)y8EpF?as-6vauodh+C87~iz>%f!UzgM1tr
zdnoi=h5!8XIz<0CW6uc|4t7m8q!EGyX^e6`x10Yx&l6=s!$LVZY0J0jo^|?Mp%gK4
z8e4wL<<&o^!@@B&6K~>sN>Aorevw6}vQi0NSXhv=vC$y@4%MWQk&#;Qf&pjt;Yfky
z+>nO)`aIf=>A4Ldwgf5$VM87n7neUO2Hf-8R1a@tj-6Op>h_$NEYKSIZby<_u8!J7
zyG6|PJ3m-hFu;I!vG^yu8$uB-6!*jTnO#dVo|@vB#I%L?x+$?IuT9C#kEBP0iQxP~
z+E<Piz9d+T$~!t1Nt;)}T2z#U<JI-#`L?w2Sk2P4Wb09SC-er6zkjTw94Ug+dVV=O
z&)Cs;VayZ7dsXtPjt;Hy+!rHMnNRf_HfqKvp-{O22UUBPn4-6LWP6J_!Y<D4G3!|g
zhrQ#CKg&$kR#(Yo>+~R)9Fo@uM@KVn#eKjrJA~m5?YM>HV^=38C*#mbkPM3`Sl2>P
zq#z#Z%f!hku2UtQMf)-9rh~)7sUib!*q0|Zinwc`=sOaWh%MO)_^sBEo4>BHu+RY{
zs!3<IR_>j*UsJmha$K7;S~sa_yFan45N2(br(*xPBT>=pyj-+6DR3D{`MD@*u}iAP
z6mMpS5>>wYfQc7EJ18WYUR*cvYKYX&QAP86u7G=cMk!kY7bj;xkX?;&S+aa|UWn$a
z&&U2K?fp`Ch9cm4+>L@UP+kQN!o77kVS1dZ%Ipv>?jgFu%>NHvUjbHiyJe4}fFK|e
z5+VwM2m&G{Eh?a-bc1wvw}ME6f^<nscgLZTmhSEb>HhEY-I+Tx|7Yf2AFqD*({s-6
zyzh>+)?V8HmzQ-^%jx8AGtPR*WaWYMa`&WPdQWWILzJKRAj;Bbu5sL>soHaLc2>cz
zRj+j^7<7SNpi~5DA358I4k$S1`#vxbkM9^6d6{(rQ~I2oD4F*+Bf}dSD0BKeJYH9P
zfY10*^UqIBUG)|)2ax1F2!V9pUTp$LPCV*win{YAMSD+=^~*ePv;ZtC^#wXD1hHZ0
z%W`3t`#*Unjsqw{*Rv`0TwQUR&@?f}zPaRE-QY)4bAExkUyp7c&Sidaip}bB%)2<&
z8qP4@K3MWquk$$Nb#Cg+%m?1f<9?zGL~K^o7vsJZLuk1WV2)KcTWw}$=5)TR-)<xB
z;C!}H&>G)IpI0rL#--)pkU}Hjk|fqD1E?Upo(O1NUT3t<1sra28~*t@tE-%*QWlTA
ze$Wo9Z*6k*Ly(wEpb2eD;{P9=q?s79VEPaTk$+N)i_;M?nWtG*UJmW3%CkQCJaq}0
z>nI=E`uZf4u(xR8p$3t=tJ=3(6`@;01@+5pZ75I*GB}YTI9e5QyGJm>Ewr|>DmEU*
z$vP21+vc|Th=_NwDx7j$c4yOWc@oV$kMCdK*VYCmzq@DKWM;p4mg9))4w{C%(T8#`
z!UASV-tt{X`J}ZuZjZcv?bQI=&zqoK0a*P9Y+_5?F3iUYbwefML`qK1v2Wk*t4VGN
ztBkAn+%6_j&4#1{mO+0GH&u}C+Q40@bZNh+Fgibey4Xzy!3=x~mBDFXQTg&SI?dSa
z%ZQkmEOPG4KOl$&1&ukE)4osFBHU9TY|L=VW>;5JL7qE)p0mQ!2{9ki1hPypjrRxm
z7)<ln39Wd6d7RSAuSNnjP$_WRoogONV_;$qfkBGsWXticjEOovDCeP$1Z#w#@eOX!
zgMbzqACRM$w$C0sC;{ezpsLmS{FoV*xc$n{|FdS#&+iU@?Pca(5y)fgJg<;=3?QR6
zr^TBnV8l^IcW`Ri6vbyaymnc=p6lE}=<-h&{!i5lKMmhgKz^laQ1b!M(@AOC?AL6!
zYz|8e1|y<|b5z8I;48h!cX>=c>3ZY}xKcQXOp?8@mg)HUg99ogm_NYI64`r`RR^VD
z#Bo|I_^~zw#z6nMYeHF$Vl<&p{XFX%%03xf`nW{tPt+yz)**$IH9!V33Ser9x*cvy
zH?GyO9gga6ufl^yRzN_xo^F;6aydMYa)OnJb>ego-r>>+2t0!F8Ahha0o2o2Isi;W
zgqgWOeigjBhhfKp@87>x41JLQY^PmupS~z86?9Tfb`TUE?guMb6SF6DbjmQBR3rla
zcty3Br!4-s7O;830E!Ny@lwy`YCb+bm|Gj(n&c)2(orV_P(`scQshfIIGC20PrnE3
zl2$>zwe`s_iMUGnRV<>;UOz&FVoA~Q89FjB!N2!K&<Wv&3WSHUuD<^GME9p_o)D(&
ztZSfj0Et#@m%Tfv-zS~7QT_ZfwZFqKl{<_MZ)N7@L0(W&lZ05fw{-Cna4Dk_3h+BF
zYKNT%;b0<qHO4yyzmj)+{2n|C|5Q6ptEl1wv<-gH_9~qUMQPrr2V}oSix3P44gmC<
z*<J#p2A|T}pPenV4cw2t;S`n<?X^J3?TKayc%FU5-u_nAl~!1ITwKo4)LBFj1;1Uh
z?N*lM`~w(o{MB4tHp%`D_SU2UeyTf`%i`LX`S-GzmSb)XbXx(}|GS0Y3=I;rcvUi(
zDk|x}3Mbr~oKn;+%JJ&5h8^Jmo_BOp(B*(NS%2Qy{Kq=p6O^ADa89yt$SaXGG};@%
z2x0K?YX$1r%5-FhEDC!<M^#PS=+E<RO4Eb2MZ4u-UthWZh#o5LVo5qX{O^G`&2Dss
z5`CaGp}Mi^A&M+ZR8$lwS0ZSg%_H?cJc_D2xG}>8O=Kn(Jc8B!1jO0_Oc@%C<bRi6
zg|j$3*UUfa%5-sr&=~T;JIYWhA|gTnhpCDrdV7|v8oj5r!%7`?B>^$5m2(mh_^j7;
zstk4e+DL(avpI-j8QAI+U%zGnBBO>dd>RsTnaJ7s9xiOfV2|0;*NGh>Gd~YblXMq=
zNJ4ZnnI?`7LzYcTR#H+2*?qA3#1=|<ts~Xyi$i0l!_ljBcqWADXQ!vg6Q3@b9<lBa
zD3lDXmbSKrI^e9{CR?qbKuUwuDEHxmg=Hnw0^T^2#X7zRB|0EkGWhd6YackA)m92b
zk%$IV5AYC4Ut0VUbb>Cg*r3-%S68jrndkEI8pz-)<W8Zk);tgh1kMH?!qxZm^fDL$
zWN@pR52`x2x|}XrZ10DWx8EHd<CHnTrvdTXAy0wA2@ihCWsgui;nD*PQ5d>KuP!|g
zChb|;i%s=UQ{)yel$v1I4)BACul}hlz5lDSY;S!B3-&VM3_nBMzksm5(Y+4k3e<7_
ztSYG0|DXtjRPgbkEcpYGkq}R67h3YRkKaHxhHQnw_gCQBwa+>{7WgpLkQ30te-)?+
ztoyim)@Ju~iE&7?jgymd1-k7&0+IVz7#Om{xx9vC4cO_LjSgAC=sFN0nGnyO*^Zhc
z;u0q&RQ-#0b}&H8Hxhf*US|<vbLo;s#H2oBLAJN#YF-i;a-mD70u>jL!1?3VVE)oE
z>`Mi(R(b_wa8MUdSu1R;(t^jE1JRcdc^EfFr<GH^zkZE4i%d>h`~4y5=QsqMt{HcQ
z(~TnB>^`I6ph8Y_Pqe^nJ~PX|3%6i+Mc-~1;dFor@@Ey_!v3E@<W*b~d9c|^DHV>(
zfaY|zB)_X9_;!?X@xvq&d?_IU$B$RRGOZBvQsFVQ<;d=vj+Qq6oq2Ck$za9PK)9^A
z%@>X!?rQ7m%J~OT0FEW`BN__aQo-qeBR{z~NaQE11-`C8(n(4Ris=_jDiFayYpRk0
zh1>6~b10qjBfHz$dZA<Dgk4-e#gK)#1?Q9B*K?ozgkXZL(D*el)5IBOYWhG=+U79B
zg^wqt(%XBGjn>Vbtlerx)DJpd*khX8<p?#8Tohb$ObL|j=P0ju@AGtA`x$Z@E*%s-
z*@c_E>|Zj0JG0Izrf>%}2n#zClY(f(rAgRSp{`0+F|@#0KXtM0bu-v<L&L^pIae+i
z4Ib2VUCBfY*}<?t%FV`T^v4hU_U`V|cUhp1?{b7``Ru>ofR8F+x?K0!Ro;*qwK7al
zOe|Jz4D7zj1{R@0fHzk=XgLZipU|_4Z(`|1IEi;AT-C@aYiWskgA32Zz#6&LY(oW3
z1oA6R65Pw~8!z2dTsnt_qp;l@+E-(UbvO~+0D;i`NrCcDOPh?V26-LS{LfhU_yl%$
z0~z{2uFVUjhSYO7oIl5sw*QTVDYS+?L$P3i5R?XOVg{5{Aj$?3Aq8S7G)$`_1ysQD
za<;cu8d#4`)trH8+{)Z)2st|Hbq`j%jT_$MOry;C_S@qFxoS`Riy;q`9EVs2KX3(Z
zu4Zl(QjZk0p`kX8AFbgZ43t~SKp2DePaF~s{D%u_FZt}_)Bz^(2%uwOH>wK!LD*e@
z`Y+`D7bsxV%D-g<1oSH-+ycSUdnI3HezOc$&KoDrKiF}#uUW$WFf1Fv8W$g*#-jgX
zqg&%|M<*FaF8w7pq;x>1tjlYzp?+NfYKzEl+LhxC;OZq+VyY7iMw69sNy+PNlap_9
zb0g3Tmlqbm_g@WOrv#V-nGDn%sK24Pb%qt7zrb-0X^r;yDL>*BaE${kfe6F(q3O7_
z+hgfHrhWn0+I!0MmG*P<_#jiIhUW+OJB~jggF%Jes4YaWy{D`u5DX(=S-}=21_siu
zAM!i6{3)fT#Qy0^<&QWa4SNh=1z6`w-MZxq(;o`Zo<VFyO81J3WyY!<li5ualYxd9
zSFNSYy#>NjYzntvqk;1C#Z8%XX*T`t&Z{a8<6q84kDFULz5|tOG+@y`RzeRlmS^Dq
zD;P+6F{;S{mln*LzxTJoxh7*X)*F>N>tNysWk+fMx=&DU76|j6($L65Rp0Cw0n!h0
z?oz{MKMiDSq^BOo>kJC;Zi`bMAl{G`Vi92M1)YfQbK)OyuJ0jI$cwaFBKHG;G?;$)
zU^-v38iYMrP6t{GTk0}2q3@y2g!CB;C%<=hUKpI~t+Mu30@^DPsMoK92Q<IeS0RFk
zaWqc>pmmTWC%|I5wM@6sJjY7bf2E15{GR6j0HaGtn`4m6F{)Q1M{^C1wl=}i(s%L|
zNjLmIy=wLs%}Ffhkc?zvalw5-L}V=;dPx7}jSQI#D4_F+7-O@L#l=)^o9r7<O-O5L
z(F4H+N8#csUfi)A@DAjOtFVd!es*@?w4sq|ux$I&oc;h%ZpE67<{^(YH28rvmz0vS
zg~3^RAc&y5dB<i{o?*LwsE|$7u*UPl1^0J*dmr>)Yx|aHH*aQ1CR_uLns88Y0s{?i
z9S(yuDA^t`s2mo-X)tAUZY8&G>*+x_{L@XM3&Xyo^&sx8!gu4<j-J4hZ(C3Z2a+nB
zXMbnJwR#Dd>tj$YzV+wfaykA4+s-n?ddQM{e?e{Y3*H2<o=DL%_*>X4iG2k%buRcZ
z)3F`sMCB#Yh~FK|kl_Fj<agJmRYhDx1la7cfNKC3^xa}`FC+A8TjrDL_bw=*QAakl
zCMFP?hl^>i?6=O}KqJM-c-3)sdiTMD3?K=!AZ36t2E7}97ldmlxIohUg8XGZ;#kS4
zhgX{+{Awk+EYFcIOdba&QN-ajLK8GTiO~$tZKkEC8+Jt#0_z+%>0FXIWh<h7r7#r(
z7P8OW6xc}vp+Zg`gMfFg+TO$T2cT`6of*Eam?O^@EG(PqlCG!w3W|#5JiIk<Rs0fk
z5m&WSbFS6TAZHJzi3_ut5Nn*fsmQj%)MfzA1F<2<zsGy=&20Uda^rNHb!W@mAF1Fd
zmmZH|{}6`qbPaZRd3e5o5v51}lzGxJ(#4kji%vFzL(~lGyR$_70F%mZe}{Ruz8?Ob
zvR}ftt6d{+w{&dh!AXTVBl+EJ5JXEQ@LhnSUith%6m)N(u`}pTJAfL?F>3w#!8*r>
zh;Cj&Vgk7D+jII(fHx!W75tS$5TtAlH%O}1caCuXPzCcmf{h;Ur2(l1^pXN+++L)%
zDE$5p*ae_fwO3}?U!Szu1wh+m<zREaTIK!+la0mCV+ytX>Z9SdixnO1?IHCK2eVf-
z?ZLyqZSgrSUGha*b!H=XL0(=0?5<1(-#el*&gd>Z&<G)Ma|m*2u4jiMIqv7n{0T4R
z(rw_H`4i=UoC{W6&4M*;TC?l-=;$O*^ds;j#i)H3@Sj?MFsK4(_bk7B{hB2ng9Ggh
zoO1i!vvwpI5pE}f?08QPjBVzc3XI2w6i7^K!=&V2t}72vQ$OXaEkMSIl@%vYRxp{l
zBmG2RXg>$$puh{5P-5^}dw+bn-DX}`U#XhZ701)jp$h#T3D8V-&K`nLTf4XPM~D@4
z;;!2kQP9mirCaN{>M<EVtQyMGpnnf&xZKq^+CBa!MMXtOlUCKVN+~H`u!iD8&Q!x;
z1Vyg@cmaorqBh~jq{@NDtobWa5dd%HA!7}uyk`McfiU6<8IWvNKDk}kzPCKlm~wKF
zQn3NTi;~jlUP2=jvT-jh#X!vnI@NW*VU0ot(|QkzIJ&aDMV1=6_{H2@ni7-Iu}tzI
zP**p2?SYusAH2kKpkheP&045Y`b%Ca;Q5jo2&B5YnYlfr>JB6zFj$6UDNK%>*2e8W
z0g}OR=`IHcCN(t<3`(8%_j>j^1{vo8Fl9I8QY>j+SXfvA=9<g#?-wW~e?oxy_2F9c
z_WN7K*ok9E!8kxIW=BVwjY3=ppRdE})vV%$1y_k}?;I4{gSF<hVT}molu=AYJKdU*
z@BQih1mtRE4r3pm{|5X`lh^+0lGko8U7kS_o7lp;zty3G;TBOpupoqpajyAE`zvaV
zX?}hhqwR|}d43H2^}hgc#$U<Z^YzWp(3-Z2-SW5CoxABj&tMc<EZ3rz0hK*0Go`b=
zfQSQ>L=ncXd&I<#?d|QeKKcu81`3+m2}0a5E1T{KgIS6s?(O@!y*R_=miVp!B<i;J
zK<H6Q1rMCI3|-h9o0BGv&(H_AY<b^XD{eJZe()$A1_guy%6lkH_m;4cwFZneJ)MDC
z{{us>{l7`IEMX*r5tx!vD<V=kNQaRCe~OaIm>xQLWUmN1Q8Caml`7Z14_$)OR8Zv>
z+E&teRd*W;tBmw`bA4SO4+T`HL2zWA#$R3>9e`s{BtWR?NW^C?*5o<y0t~$ac?Qv1
zPXc|4g*32ov$P(`I6xxkn%~>ogFK1=Y7BIpaiE|sGqqE-v(GccJC_Wpw3qCIsAXaF
zC$vqrF_S7aS-=yUw22Vcj;>IvnW@?R?D#m`$qe4FN~)v7Kq2Qlq<yG%i`WO*ADc|y
z;G=-q@mn_2XygC@9QLGvYXQ1QfX8CyIYg@7tpj3w{4C&2p^BCU%xizQb(?D=8?^HJ
z{sNnV!^-IrlLLsWk6F&hHKt}}0x+wQ2LoTJ;2Qr19hXMK(p7i`02DC&R3_>GT!Z%E
z!&l&VQMnj?1E%7#mO7(W_djI=o@lW02ai2Z1|Tlj?wMgeeYrMXhTIXD6U^t-F&Cft
z%ebL2IUE#<gjYnMBm>R2EVQ@)hm9Fsfv$=gxnrYj%nra<gJH(y>k$x0e<xAdNk~XU
zd0ZiLG4#bHj^c1zVHoWY32ee!N(2l3_G$h)Eq8$YVlh!h(!`yyAGoA<?a2akK}p3+
zK%%4q{e~QHI9<^PC7?Ch8en#Cax(0U+-2|i4h1zV0a*kw7ZebnB~?)=yUdMZK}f^P
zW~}FCpTV57${X(hSwMVZ5ceh}!LuFt(V@T2w4c6+U{tlZKawGrRZ9B&qtD>*s(*Jz
zL_}G2bu}S;M0mr4)sFl>xG=`?pq|SL+DDq-b#z!C#|HXkCWFok*qxlqy@cSn+9{@K
z7G|(_s+QwqQo|X;BX;1NCS~>M2iAto{Sr47=e7?Z6{-^n%ap*1BGHp^a|&2kS~cR5
zD=0X~P%=S#;tWUvn1SzWLtO9GxcvL6neW1}#<{(}s20g-*lluwl4rV*q!{GT?9HEl
zKYq%=F|3JF2bxlq%{(}wjVPZW4}fgZ==<S(@HF8S7)==a+rs{2&_Wq(JA%7O?B(AG
zbcUeh6&|oshdoQkjV!}(fRVjRoSS+ODO<PE9qHbpK5*22|K4@5#`zx{1g6abhd0zp
z3a6Psg`PNWMy6ACZVnYX@*aiJM;OBp=ZlyQz7Lhg!|_OdL=G?r<mra<LiZ>!1Lyuo
z9yF_9h922|e(Az6-3UkKV5c!y<pxH1p-X^|&%mEVs)2M#cNq5=hxq7FQ7VJC&80x+
zXs)NPZ#>^(>j%{@Ku`skpLAYS0P(Eg>l=ZZ$Ef&R7_^O*bBdD(GoGO)eBL!RuFxYT
zkBoeUGnS0(tg1f0HX$G1nWch6*}lYPQ^B(j(=?`l?+QX8V?+G&PFUU>?_8pO<kte`
zyF$<d5so{ou4N)41jgx9;u{67-6U05x(6Ho2x4>{rDBBPKp~p}aJl+CI5YBhh+35X
z%A_VjjRfU6Wm2i28YTP;#xB$lE<y631G_)RT-c$AT^mwC|7E?r1@mJHwx>2u8E5!}
zggLW~+XbU&deBe6u{Rpp{{U4J^3mp~aI9zL@s+?DLXkCNDR-ndR8M@_TGjUDyzJDE
z`#vfJA4c3NbWRu%_S<IucE93z&&IO3N4f2xl4nn7rCv`Dx*j7ZbSCaN_6<r4OI6is
zkeCZ(@vsr!Mk*y;T(qGb83GjmIR8`7($jZjUcx3F`L$OUzkV42s4}HD(~@*X2`2@l
z{rx#*I0Ha)8n%Tb#C3OYZ<UK8p;Je9g2DQAIHEvst^fYsc)AqR6NmZfgVL~wVCjjx
zywYrTX0|9%%@z3OyoF~l_N)rjmSAd@3{?fl=%L3{glRA$uKS%D@rO-*X5*!D@)})N
z;$X;Nh&S*M9%W-`dR^VatkP68>^WeWOuUDMkG5)_UEV8nze?!wgz-9}p7+k{1qvL%
zSPTNOVulxxyrRr#q#qD$o;_J*x5m%HXO|gRkhwNHc;Jq$0G8slEkUj$YY!NV=zaYC
z72wGrOVIR$T7}$KJ^&!YZT9FgMOvi+WC5905*BI?KS`+00u=r!b3v-0^E^zS+YqDd
zDD(Aattmag!^=P((9;A7DRn33Gf>epA`!ttsB1RMu6lt01<_x~kzOyiNse;7)A4NU
zGmm~%rK3CzetG;Se2Fk5ycQ}sRf2)Zsq-5H%Kh%8tNUQ;4clCEhH|)9l7pw{aPF?F
zUX=QqAzXdrloVwjR90P`@Nl{u{{*dK?r}10T~{_pX8tKB0Fc;5nCG8W<?yi|uANa2
ztAq!4gHCsVj^Wv}2D%);svI3pUc_KsF}<=X?Wd5~IXEa9Ywf!}udAmw)<ppvLOLo+
zv>02qM=R%9Vksr4O|0oq_F#Ndmpz6dzW?x2SXLSkFnPo78!t+qaG!-(Su?roG@7t;
zpKD~>l6Mux&4D#J`xLj4@<q>5-DjP2PaX5o!rn|KSXNNn_0ysB@6yrqFn3AZ`8f|c
zzguS#<J#gPgJ=DRv`<sLy+ddDnvJCC;ge<N!Jrv=wzd5GH*I>J1`<m=xZu=kGVtGX
zKZ!e|N1}s+B(DFK@RU0NBURTm)6FfM0Z)S+-AuI&q$?nz5rXv;ze-!RUPOT&lLMw+
z8Zv^~Caa#T)}udZ8ysA)s0D%)OzCn{aZDKJz{z%Zo<a`pNY*sqHY1(uKY!jyADS#R
zMfYC>932W+WBbcowa{m2l5rxomHoO((9-1T$Derjll#H!IS7jFAw#A$9M(_szv@rp
zHMjq%^d8!0NRBY^axMpKafeOLq}}*OWXUFT)a{8YA?<Ly_!HH3y~O~iUUqc9Fj#q~
zA4tqRmT^(BU5m~J44{NYI^^)^7mJ25^>^r^{r$6GnOQEpb*>4171Tgc^~S?5-onbZ
zDfV{Hk?YWrTAP^qD-*zr{GlY5F&dQ$sd5(Q-T$M5O=4BnzuX3rAOHn_!lbRzS~Z9O
z{;>3%cdh;;h4+g5U9n+LTSv!w^u#oP1TYx<V-o1`8|dD!^L9Ch>uba_dT(s9)#snQ
zV2N|@uWP7VfC+ojomYS*7)E-05ilfwR(f$^$F{sgTovFw2It4Zrf641%@D__geKA<
z87jA|52?NJ4$3Dv&npD&$og(;LIM2xF$Dz$@8O7yyr(wxDr_Yu>MunzRej31MMT!K
z`qBGnlc7uzZTfdtmo42lK|}CGgD4L(D@wR%WwvUMsSgH0UaPR?R8w6IP5^uC=)&Wb
z3EQ=2Ohn{OnbNwo8U)yP%Lr}i!hyR9KdFI2S`fB8m64qHgo7|?9SBo-cmSE=d|@<P
zmGOYt_v+Qrt{eBLz?`)V>=B9T=+AT*W{wi`gE)hvv9TW)Eh1yQT9rfyBd${{`=(NQ
zd?Sb>4nSmMYm@+})qW?7JMtCOmA*mi2FGH1fKy<R*6D~znuOdTwd1oBn39lrkE6xn
zk&@;Ds&AV)@k;~o8D719^>2A*MLF@}tdyusI^X&LOC4-HgkKr&k?)8+dZdXAEBD<{
zl2f4E2FD`S7)LpTTWsLoou&Os(IK+?wo_n{RqP}QO!qDuucX|dn>BAW{u6jkk<9aP
zm9P&bEAOdHe0ZB|=^+N-CYKl6$X3^k<v3yUh*IHTwO<1ucv{=(*KZmR;Byqg=ZJ?=
z2uU)7tJ;OJU5>0yjJa+Y;b0Eq)Azo<3<vxD|NL9(&cYxa1W(S%4E8hrZSLhUe0ovA
z^J$&dpd9(0*pSZ*&&G+OM|k*ywnCA3u8S>!P4=_l4;B``(j;7m=#CS*N`DCLMsppE
z8cE?I)Z^tKm<_(c6=ytv7~bKuQJ~+hdI|2qD!6<v+cHeSf7@WL=?QqC$>;pd;Nt0U
z-Y-}E%DKl+zG~&X_Df0|Ac(UUHH}D(MB5XM{LxxN+n(m;btZSmpU1V}NTi9pGBsxs
z(X3sX<4)fp8Nuq+R#uCdKhhlylt6bw_bFo<u8(5+2Bc^$QZGJ46!rM>ugkNU)cXGb
z`wJ1?g8?0IW+MQNleW`pYI>Y9qSv4p(@s8&qT}gFqRe|Fu+n%@L#p8B^Vf>J$jik=
z#NC_XdEH<47Ptb)VTX#Nc@P8kfgI;4p9Yvh)XH=Kz^!t@PeZ*}-evbCq}0roue>M+
zw`MTc^vvC;#8{ZKq?#87CfvW}WnbN+cO(b@pv3`nv6POB-{1?ZIQL-B+DJ(s<YS8$
zQQ!V_W+LjqPy9n7#VuqUr9=I1+A-w#WBDxD{3!zpSNaYl5wb92HmPe?Wtu<usc?V4
zm~M0$Hokfzz&Bpe)pp#3Jq!5ft%x7m&@EY|T%Z8@aZpIg13f%gr`a*6zSJnvcSlx?
zNIzAgJ>uJF$jC<bYUDF&oBa6iwl>SP^~sQf;hDpYDcv%eWPr$^oc#E`)M(Jke-*?$
z;j8rh3QP52$l@A?I&#oL2#JW+V6J$q#yA~%@uZCnlPp_gLxuhzQgJD0mKt2Hkr#yC
z-F^Mj&8VnlSXZtN=$FPlMn!kmDX4Sd0_q=>I5}%+k!FfUY{|DO?+aRIMPMdNL1=mc
zU@<bQuQkPiYV(MP)vzyn;F<>9{xZ(v<G$2qNYWk*dE{YyYmgo0HDD%cQ0tDNpc;Po
zII|&eigxZym0ux0^a8p`gc!^ro0q*))*a`pn2ID)GF&ORY*GdlI`epPJ3FoAQAxlp
zC=G`^7S~6QmGodhhG~R6AE|YN&sB9Yk~jSdDCg0w)A6$H6g;Y}BJOWU{iUO0DR&SE
z6W4v8TpHPrwpSxs1D!|cEVO~YU^hD#N0P@C)`;OWakA{c(=gL)HcAdv1+u;s;kVoP
z70!5}1e<4az%d{Na1HjnWFMcgOj`KX3rHQ5#;ol?5R!_sPt0xS0n#s{qv(sPjW~N*
zS%u-21d<zQ<k!AWNxc%3dRFjJP}{tq`IlkZ(J2iLv!gh(Z_5u3<}{8#A^2~Ne+|80
z@57p-sjn~gF6vu<S1fmTlIwi!-I!L+ZsxUKuSnl0+8*uc9o~j^_iiZ7B-IJY#3b*5
z-^+o)!ADF?RX1HLXYKU1CeA7j^Kx_5^_9ZgbdpTF2D6wuOA|ji7ktEx68oB~=4tbw
z|II_Kr?)c=o=QkCMsjRF+9F@4e*@?l$A~%4!GLJe1@#}|ayez?_E9yEX7O{4jmHei
zvz53q>$Z!1`Fhwpeu>qgvOT4_0?o{Vek7}5v;<zq*RN;<1PjTPm45H-ZETuck9ZB3
zPf~DIRJ_#duZM{=kE&Z$-0$JpE0h{G6ju?Z00~On#SwqYO^($pYbZa^hlbb{%XgmI
zZ2TVjJ~pPDi)%bZL{dl%P7gbOJIpOyb@$k%6r9bqwLKLy)Sf;46Kvr6MXsFy-@!KS
zjL2KA2~k+xzOxX@WbwI_E=(kyA`PYti8=pn$?q}|`{&vn=<)Z{Ha#{8Jt&EScLIsJ
zSmN4Suh*Z!mpW{nsiR%Q^4#I^<)t$V%=~;lK3-3%&GhlvRdv$S<BA|6q-HRva6XEU
zy>r}~jDB!h8Z9Fu<N4)_L-OA+cU&V+H!jhgX~jzM`=q2_E$3<0&ufyBJc{1jzkk2j
zgJ0TFXSSc1nez4WHX9oo*R(zif8|@u%5VkS+S)dP=BRD30z5n-7^ovUcHva75yZUE
zRWdY9$jcbR6eSbIA!EnfTjtO1H&2w$vMqhGwe`SZtK#Y%QQ5aSNmefke1n>88fNB*
z3Zz~9LGkw7Tu6<R*D8<Dag0c6$TLh$+N%VIIY+6pR|=P-<J=E<T*{~RqP6c&kw#YL
z0g~9VzglE_sjj5dc7h4-xZEixm{ILIv*ny@oTHkwv`1l~G);{mGgZYzJLTWDyQhC)
z2bFfijoQ52oE$+rJEB|-|2Jl4LB9}IhZ`rc<Y_%$T~`vHyd;y<h{L+I>Qz_wal-ZJ
z?G1GM<*{dK(^)z%NR~R4ejd4HXJ_vWsZi7b$YJ1q1BGY*&wL1x?IVo8*x${4%6XsC
z(Jh=3Ia8e~XlS_i?rIt{Yc{avO2Q3gSGfe7!_u&8`4)^rdBCs`A*eYU|1N51p8U<r
zHyMp^SkF1yJ)ZBe)W&<WF;d{Q8nI}_8Si$g8#j#xFPs0do(j-Lme5+`;ZpXelDIrO
z#1Y}~@hz#2&U@45fl*mB&&p6{78kST$xp2gt#x(17K{lAcKn-seKFVG(2gjmtDEWY
zGTaH+9eaOwhFwo0nsY7vwWhb@-UGe9q$EbGT5*qu7|0*_Z-4W@y>mn0fBYzu;BLR}
z@o>xLD^AT*8gOR|gi&y#Cot2cABaaKWPR;*X=y1$6iPUY8RBOL!`qRrOWidT;BY!*
zw!EM-5AyT@XQl*~!jM}*6Zx8fQuMT_uN;owEy0M<Wl(3QjR7m^??tQQ)6@BSbc*@w
z($0ssy^^(`{P;m&y&T~45p|57o*p*qqE9SzZ;o?-Y4jPh#Z1?7X+c3f6g&Cm)46)B
z3Lm$p$cg#gFyR{mw@m;FHA3QhMn}D3zBoUYE~^`zsc($rk;@u<X}?8KBq<=k2VlP=
z4Je}WqBdbP*+Yd*_4h;tu7%+}rubIaV`&j8(AaP~KjlpE@rxGB4D}+eUe(YikZCP-
zo|QlB$j%l61CBCU1_sSOUY=^WBB5dy2<eQb&Zr~Ju4oEub(plh9J|uiO3K&onI3Cv
zE-l6Ej4DC_E=4!U67G_AFmIOYR%NA=$wWDtrDegdEaT4PPoHuf_IvfqZ{;DQS?$RZ
zR<H9dtaV%k1rC~=%1TVc#UW})$lb_&;7(!ETR8IL^9t1<^al>N!3{|$E8KVKx6TV1
zMcGv8S>PmpcXz)Q5O^>*pJ(XKZDYWM|C=_n?al+fyWY6l{m$5$GX??zwJVR!9zlS6
z1+swheLp|U^YcB9-@nT_D<+zo2|+mYiG4+!ST;TQ7JgcNchJ52;1GiWGBMxk>R7#=
zyI-BRqEMZk(e<WR`}L{l)+jSG>27WoUI)wlxo$OidB3iht5<L@*<UGTZ1_Bt(M!@m
zToXI{s6YGwwxBfu(bp-D2x||*z*uQdp?=&npPnFZSw9Cph3H_^#6WXrvWE#}YO1!A
z`}!wlZ5oRP@oAU6o6^!Dkr!~@f`BWZ`;7iTw+|-EgP9PjQ*;*_0~stOSHi*?E#R5|
zEn)iQ?DW_eDIVVZbGwbVOT-XG;nY&SkXEfr7L9n-TX>Jcog7w_D5-?Q(Sa<*?0o0~
zXVKDCMNf}3DVd4H1%@)Xo{s|(^G+;4*v^gy9@3qA_BT;1mO9^W^1%pA%NtzY`f60o
zDlH87Hvas1zPSslzgtF&o=C~dr<wLFb-RAUzk!9Zf(g+fB{h|`$TBI?{u(RVg#Q7j
zghX7$%wdde5tG@(vG6{JxjDPRe0$i6{L?q!`8ycC?BU^(t$`pVAu;@rHTbP#ab=W+
z0E>vH;lLf-T<XfEFD3V5)vC}eFVOzbhE&*X_5^(R6cK^@z-h(O)O~ePcPdO%+)!g=
zZ0tp;1wI7zW4NN<Vq<?{M_Sozd?8_3GU|xQ-|X|s$+_P6RnX^<8Q>j47@CcAZ4FLH
zB0SnZJS^~WdC>$C#<!?@040A0<7|VoXK*XOeA#b+NpDTl$sl8u{ob+CAiiky(t898
zFm&$rMo1{yj)&Q1<(-6uDr3Yv^kAA}W2oqdGq6{FjM>xElPVrU{T3%+_Cc@#eudzD
z#nq+o%WF}PpTTrmS+#~Vd2^Z&llzO;!TehtQ&ZF3^SwMxP$RG&Q)9e_1>o^xSH{N1
z1;D7PR@o8K$zijE6Z*{q+;s~;j@}@B742u7wrkIXQnHhhUQ3@bY|O_Hz4>FnI#OXx
z&#3y+6AtU<OP%ALUSeLSXZ9QWtJXW?=F|R%g0D4CVQam`{J<OU!$fO+{p!=TaWM^U
zvx&F&`KlvswE(Tp3!;gcl@*LYA<uyUomfum*L^HOq|K+9fXBUcRpxLd-iSOpKVg~R
z+pewhAqjQasZa0R&XRZS4$K&_^t=oIv~%v9qcWc$#$k+A{rr87y!OTEpif|6-x!97
zu5iEuUUg%7()nPx8h%^64%gx#g>Q_Pp~9$%vgKn*N%PJ~<_P?=)hXT^la*dG3GQ=m
zH^PJkH^WTFFW;)FX4~D?hg=|)ywwuPj30ISD70;7r&03b$={<+WqIZCW#i1!hLDyJ
zOfTeRo#_)56)iBEWO^qqJ`_$Z+$!PYQy#NB%n@h}rxyh%H#0(aEpc)2tTSeny(-uP
z{79CLaDIJoF&M=L>ox4seY0GHdGGO`VR^DQA3kuHl1OLB9`E&(0HsK`wnloh8Lk#G
z%UNA^ybs-~A1z9M+xl{e*t?7<Z7WN!GqNMqkd^fOVAx5u+CiN=T!D7uxyvzaj$$_R
z35;U!^z!LVR%+mpk)?JS!yR+G*lLL7#CjOfVT<`kMLEGNsCHs%>H#Q~7XDha1~E)%
zsX*Zb`(#>SrAm~WC1|P39d-js`3LkH*(ViDO&LJu;R&D0$aE8O{xj8Mg5|PUW^KlK
z7K9TU5lBuA4{O?qSoAs<zkKoVtb#qwSfis+Nk=Tui}!j(;ZRI@hdv2@ap63iD-g-=
z{%C&vdz+5K!uRxD(0G$D$iIOcs>mlk&7~B>_I6<Up^)N;TGAmxjHYUF_Zz|;MJSMz
zYRtRDD=()FR_x|^78PMZ%BSxBYPKfBZEN*9T|xo_XDi4TKYbqL`u7OGEpH~UW~*ON
zflba**(l7IYwynC0@0@g0<om>atu4W&DqUO@133536~!-=|OV?8QOYGqRB#&U5gRQ
zIYbPiT3EQmg#}-hO-b?Bx%HD1{4c)BX_!wmkZ2w0nww8(i8pwaMZ3iGZ6~TOJh=Zs
zMkZ&ESbI4oD%p+ict%@H{g*5qq^fXIt^cSN{#7&l*Uvugx2%wr!X<;r)Hyncg1;-t
zmDSebK(YZKH+$ibg4G~WkRLoA({}-+Hf-kl)Y29U<L<}D^VIJ|MHhpj_~LNO<!Cov
z*5@X;DW_WNF2lHeQgQK*_v=$N_sXUd-<<8VkTGek_Lc2UU)3@ynNU+|-7f;e_-5aD
zR$=0gju%d`5|-ap9`U%`;CS!Y6`cUkqfu|z&*UV=IZxcFw`$~7V-s*4lwEMUyBRUC
z)_YRGF&YiL%9!sNprOE5jC?b{+qFDn05-ygj$mQkY^)dufE@gy!g3Kg&k|#I2<++Q
z7gaX5ZlL`5@nZ%k8UdSqYEzVZDDYj(B?n)2ECwRn?^$XK0)ch{nv>lrXLG;sK!`SA
z)i(@VI#EJ%W$AizRD6`y^mP^<JyZJ2HI#Ek2v6#bSf}p5z<_}}!sX<;k+E@<HW*6h
z9>u~9xA<)Cn3R9-KeYfL`1%fxy6N3B*9ZIiq<4FTw=Ej1PEH&ZOV(KK^FJ^gU;)<5
z8b6ARlys+Ga{6Oy5Q2D@|EE;;2GCCedU|L_wdoRzs5#);)gg|8u$-rG+3$6~(kOqE
zDxUX?w)HD^)^5LKRym5_&dzt$6As-AA~YtBr8c@=yUg5N99Ww-)8~A!)|Cp&W?06N
zB?Za(eSB*Y*gd4*2U-#3oNA7nnI<FoXvV{roj01G_XCG5HDvk`9G6q;Oh9}S9WT(v
zf-Q8$Y0u#H>*(uiEw&S?#-V>|3*Ba3Q(9YFD{#9og6%>#V%T#Ueeu65@AAt?tEl+r
z)hdJk*5UK|yK-`J$iLBIu1RVu5|3)+6db*qidkN1*VPaM^Ec$kBp@*PwtsShr~KnG
zy+V?5&TY0)cJSBW>+6#)_P{hMAuTBARV>|5%bl`Wy-Q2ij^=|N1zSeZz~D6YRuI}J
zs8FA2T*jxMB#(F1LWxNiAzV?xdA!qT|Lw<*y5jHD)Xm6u0A(Ida=d2W<4aO;S262d
z1kIV|*<si5$+CF>riHO6x0qP9KyvTL`IhMd-3~ON{L;k4Ysi<bJy-h?A&UFkh+gFh
z6i|F83$7{Y=`ZGeVFTFAaspz|aGs5o_2Xb>PrmyVqh99+Wn~XZel@=hlfxR=rMg0J
zvNBo41mQKZI4Ow|zC&(slIQ713=hc8cSeOO7R;f_%I0emqNAh7nLZG>^TnciZ`OPJ
zA>CS%{5dWP$m$DBMymj`(K{?FHA^QnDSZo}z4lm(1l$ZdZ~T^*{h{3xkJueI=eKZ$
zHFAj-78V2rsG|j<LPC|@bps6z*WpW!Uhk={R<xWhEPUYt+@E5h4jznp@WWxWZsGq~
zbtPwT7Dpoy`-k@u`_^i6U<CLVjp%Ks=A3hc8{i*pjFJTf1;yr>H~Zn<A+-HouuD(Z
zUf_DBm#wrH+N*_utanm3rx94l+C*B~472pwD|vY|`JB_+!a+N_Iz!oKZ#M}wf4Vt3
zl7ut4<HDKNX|ce@#(rsIKoQPx2IhFIVOX<@oj-J&W%)E@iV4G6!y#wq{vP2V1*xwF
z+}szs87V2mVBpk{hj8mjK@Chwv9q(wS(9WX%-NlMyAleLLV_AtKPnN6A&ei#&28;C
zeFO1OVEvQ|s-@joZ*wY|r9%1hJZ4@j3fFy&7N#jyi2=657p*VP?N+jyzN|-Ygcs>c
zGHahiM;qOLnU9YAFbWa-c=spbs)WSFv61f_dgG{S`K&=OO?-y@JxEl_#F6>!99oeX
zqEWC2rH(z;=r;$WtY)wkY`b8$+t6tnen$Jd)tjQ$b7X|Jg<b5OPb*jfmRrrNt)=BC
zfUcs!9O24zte)EN72DWigV>zu5Cl^D4>mS8nO%+zx;f5)+G+%6`|?X(zDq8!UL=<=
zk)sLKZ1}Ru`iBz3qa5|UNM(I0h!IuNyT<OrDsi(%%}ad2D)qy|6q5WGFOD|(LCd>c
z9X%wJp@SG580M(!=s?e_E>x5~m%I&UkLU8(dIdHar(EQz2i9x2=jd<n0LpU>6%9JN
zn+|in%e!@`!IYG9W@Zz3<gQ9K-(ShFxHx=SIa-5E%d8zt(?q25jERYDE&BCzOfGX|
zAa;zpO4f@tF0JW$0?gI<j|G+$j0s+hbaYKy0`BB2b`sGU>-vg{?ptT)YlHkgZdZ^0
z>2m)oWBvQLTVn4}zCHADzX`HcB0@Ujxt2ipZ!sNyG62#|X(gopd`JPF%>5*{RTLDw
z!C8^w-o!|j0tIatc~mj@x?8nErL|Jy2C-XDW!SIRs6?3+L*(9zr~s@qm<lfLzED$}
zoLyLGN)Z%#U~q6=T39$ov#5@E;60*v@%iiE;NVEHuUZ()<fS$X<RS^2nRB_3YR8%>
zZB|ljFookbySxAUyY^$Xy|qEbSnl*Q@{Oq)aeYp3HwvR=V!C&clbLxJ%sv*T+|Lfl
z%U!7`TUbJE*x=8eERuP?4t72=6ILSOCUJuKCz`wjn6+&Hf1HD<1fk^FvB$!~!sQi?
zD?EB5`BD>{`!z8%**T_v5LXX#%`SHuMQR$bzyxQh>13bTe#>*>?GhYYlB;w4^gZGd
z<v=i>w-DHEK(U4vb${LdUMR%hFBEQy85{}o^Lg6aQ*o+J1_l&GgWHU19+8_6ZEB8G
z<>b7ot5s=oWS-dFbgEFrNtJF(x#e}=3!@`Om63z%&g7pHCUu_ly`%DSMFJwC7ltCK
z4%5g^;^oWy&yOOQG@1&uy$`0~z`9dCn*I84JN8eB@wbKL<HZPbi`72IqNDZop^Ky=
z@~x?wKr9zqOUuPWd^DUD%<}Et<a_<$ta+Z0{*&rOUq5PJTce}7Gc-^t{{B5P?3`~*
z<>s!kFs!Y;w6M0;?`v-tso)xqMRp|67ppq!h=@&I0$L$8TZudeU>0Z_f3-8~`cAC+
z(FrH`zIUt5M`+Xzj<>2J9z3Bd*YdR+S?QfGf0**?7nW0V4piAY7f1Be8p#YMaqySJ
zH)zhaK5?+FASF#{*1A1bg8lSq8<%M;Y&Ex7)nX4)Wo(5)w|pLP>Etzam<lHm%&=}o
zm}Rff3*5QlBOQ<IA>NgrJ=R$t3ZyiRtZL@#k7nZs4>g&dNIo>-ppE6ebg`(m)LYGA
zR#q<#)X&<(400(ft=6*p(LV;n5kBDaz)!*}x*0>vW|TcMRTTJFxP;ww7EvG@<Iql^
zK63>Mq@||fXnZm<YPy}=9u3O-Z(z*}8Z@}Q&J$ac<1c#)CE{X<6Y}Am0wmm1lLg`6
z4)AYWJ<$Ju4Ws8@>^nQ6Feok5qD#noI__8cKom9wCz(%Il{*zV9Rxd>?!ni*F;)`z
z9_F%yd^O+iK8f}iIyIvtSdgI$OLBXXh@oe#X%4~S=g+Mq?OW<Un9~OTzRHoG2jBQt
zwzehRrMue*$HY7K_L9BKL7XkKWp6atOi2;Mg9+}rgT`f#A2(?qZ6T=n8=HLl1@ok2
zWq<8OLPvOhIBs7i_)qiD(GjCkx3rDmNK8pl+_rrG{+5qlWm5`_{(Ov^%Y5y2teGki
z1A?OaaQOa=(!}vN$}T&CtwP%Y`s?q%X_{*Fp*9xEI~G+_W2imb5@mEpzfFu`Y)nRK
zfp<e-LKD2Bl8|__3@t$<%d%TdE9c9XbG^a|z2h2XKh$fS=1284W=~b&LP6!LJ9Li6
z*z`dqt3gJx=J&Ie^j-r<`hL*=f$V+F<?tpJ(VFT{vENZFPj=g$Y?CckDI(n1U}|!7
zLl@X)l1O$_q6l?W)yJpgsTl#cdfDWAy*~Vwq}{h?nT#G~m;a=G?27qGY7e(5z9cDW
z;+OLs{6_;E!#yLMhH1G8V3f7oa=*7X!g9Wae*gpj|HA|S^S9^z53jufT+o4(loScK
zp&cP1rtw$pi$XaPCK8w6^Iz|}w!Ut$Heks(IXoOZnwztz5Qc-Zm3TA(4OacQ`IYe5
z(QfONY1lIOSpJBib=hBe6n7^4cB0EfK|$dWCuhOn-grlccU2z$<*{5}0X+MU*GaB@
z?2Np{P>D-HaX1N<b?^Ib?1qGBH8tf6M85fYo5LYiC>herMWTHI6x`sOWU;D{*J4Gf
z_qyqe`^2Q9W#m*%W8`LJB(3MNS*5$?P7W9WaoK!`&Nc(lxaM-VX~-dADQBRrcI-;6
zyu3UHjvngAs|q*qzRYPr98@2UdtvD(N)Hx`sPupNpp%o5azi1H6sN`1z@Tom|4Ae(
z1hee7)9I4@Tjc;(idN>qrX%YH!!A!>aW#aOX*P^73Va>~I}RU1ZIHt@p6AMERlE{P
zG)Vf^)I`?F2>_RFvgb`3DFp?ljD)}d9WUYRoN-^wE>IhM%j(ejJfvkZ+JHV2MD~PX
zhL7v?#ofDeT~p}*wNf!|`F-ZeePd!${PP*7PjOAJs@h$wVi1H3UuvkT1{4<)d?v3$
zpTO#f{9v*xuLLs~^{$88%QtzO-!@-IJ$d-(>9qx;lCfW}tVPS1V&l}xABK*M7|6=Y
z6Z2dFCi<=t*V);5ixj?xZ#ID!XZ9kPe~gT|#b_7C46w}E98}HB*ufYyI>oryE2jvG
z+&Ido;<0>P!PIp0^p<mPQ>Nwti?rSz8XSC6e2Ix#4clq*WL{Nr!X&*a%8#t9m|rjH
z1n#`Whu&uBDQn+bY3b|tUark)MP2_iI;!Loj4-o6fGXNjJ89`~rmH}Sw}|}Cou)u)
zuhRax<~(*X{pxmK?~)%o7V<o+U^vcoL4oN-etuD9v0cf)Ty`aNTeQH}>$SO{pkRnc
zB<}qY>a`+*Wb^53v4O?ft@7_%VcCzI`4o7Tv0UCl0l*-;zBHxnL1%aO-GLgEqA)_4
z6BmYz9D~h*ln*z4?#7)zUFDOA^;s~P5%6rFCN~b?FJLq5+NOD(aI?<;;@XDC4HS!g
z+I5PpLHYo0q4I|Uf`VSXNq0^!<j_CJ$)(yStPjt>+`XruFva&AStPDzsj5ztAJL?4
zQSiIHE!^?>@VltEcwk2B8p^kjkY`F31q^34*87W~U|OCE9kCZ={xTf|6hXP5OOq?x
z@`2yV^}5-{Gr@iiQ|0udm%wD5*mK+45lt#=I153G`u+qq9^vGw5%{^^g==h&rnN@`
z4#HTlh-cOW5AeL(4|oX7YYu9=Z?b+C5*Q7CZo76Hs1E!jk1FVZL+dX~O7MchxNTPI
zj?Z9)$X9R}#{(D67RV7^g!FuMWaiaAkhrX-X^_N8kA}fc^yZin64q}_5)>_8U)P?h
z_TD+)yApsZTCXDp_$)#ggT-^aIyhd6VS1^dhTpKQ`L%X_rO<c8#rR2Of~pzy%kG!g
zUNKiGI$WLZ`QAfeWo4f~$|I;ipVV#qSHQyM-M_)2@j6vnbH0Ub;28PQ{<k0J9sd!q
zay5cOS*4hHdBa4l?aQhknrpw^YVsuGjoJiM-z>okE1~J9z-&^3*emT%{vvY87gb?$
z?J+D?3yON&+}v2Yy1Gec?K&^^R~yleVUg|FW5=!4)n*d~Sy^K0*s$;MEhbn`JVgaE
zHhzl})!1$NEzINNkN!*t6q%SOEkFNN2#TntCSL@NZrBC{F2=6G!9Y=bG=B{Q<3)w}
z#7y%Yn5q_&=bxX;eHZ^lO-ZT#mH|?DYa?wjT?-gJ)%P=MHDNJX%k8PnkRaF|@Cs&h
z>MsZ|xpQkqYE+zN{$5^G<y$SLk0A)@!(ZU{13wXU0UHV|7DWP5tcQn(XZs~1UMx=+
z>L!n_*-PMzx3n)>RUeMI;}H{Q@5MsbBt}LrpJrq<;(VW#_I`hQ4<4bjancEAs*kY9
zBBWFiO!>Co@0R;w;~W!dG(Rkb(KCl!Prde#pC30Pqs_xkP+7xmwjqjrbvV^86b#Qv
zO<MC*XHmDn%^}JZ9bK4)mWGq_`?@4REFE#J9Ua0JIltsPJfR$t`0^nDN<_woLSnLF
z$K3$#TJFwqzCW@$-QOj;*{_)7`iREhQON}p?Qdb=F23-!go^qH@X)T3!n+Q6>pwPz
zvp(Qk@+Kq{-*znh^%pIoN&_qvVZWW%Zf-acuzw&sg^QA)$I5orln0DI7{&ci-s8Jp
zb@^ZOzoiU`n$>b=M!k)FF(+uYtG+Gtd&nVd@e;IQ9pCc5nS_;41<D17r6`4cK6f=W
z(;~~SnR4+kW`_#B>-DqON5>q1J5lka$!AfIyQTePIOot(^bj}E*Kb`E)LFRJRyw!X
zaqsb%^ak+@uG7NDpZR`D-B^RUFijV<uFc2H&Vrfc4^htd`-eL#U}>A?zbdBGV!||H
zQ83fB*2ZPl<W_ThLVym2lX!%zceMU9;Dm({#vVHbKS-RgbaUend=6D6XF<-)NA(@C
z@`s;gXW27+d@Fq(?SJRu=Jr3-OncxxjpGWPC1G}s()aI>pG0#-rO)USf1U$p@tEI}
zfd8Y)(dyDl2QP2+4Zh$TZAS_+GL61$m<WD9%gb|;TL+JVMd=wCLmrzv&KAbO2})x3
z%V(M>Gxx@`JC+(4Ebu7j<68)ZPOBWB(`o<VlZ~kbdKk05#do^mt_c4N0)?--9kor+
z-V>h*9Al?Y+aZ8|fTTz&6hKUMdNx*qcz0<w6}@s-so#JV865IW#}kq$?O}kY0o0p4
zi(b+hZ{PWB-Q4Da5v{UmbwA);zB6l(05@a_EkIMNhOm?rp1m7TF0h)+nda&%thE2!
z?9czPg|BO~0`^+Gvx)EQ+GRPz)<~GC-Lh}QoERJ)UeB)~+kc>s!94A;b9wNn)Z%k(
z1<suIb?*1erVWw*6iC2qzK&r0EH(y(Hffmm{}yYI0jMcX;6IpCz(gKzJ|TKJx3CcK
z<A;vF(}Sm4s^S3i{VXjFkNUN`*6zmuI95_h%9mTY;T?;Syv}@j-PO1xB&+WvB?U!9
zDDUFWQ{QSRxdHL#_^c@O<AE<F$onk?bRbi{XsdB_I<+|BvR-lx2|oIJNOXU?_U6${
zb1G<9)c)?i7GQ`HL#t5Dwbr#n0fF6jo2?|uS}|}z7v(C=&5d^qK0FMXaK%JDaoWf5
z$}@lEKb;==N5FWuhu>0Y(|x9n@djFL$|N+cueYaM@c^9}W#VypjD%giQXU)DJ2ZUK
zD^WI;<?Zh25QGN$V2g_A4%2Om0Sz3Z12hvX!P_h>ECKEMniiFu>qmoG1(9r`jbhyj
zbYb9se($Gr#<%crkK$rkfM6a{Q%hMrJO>>J@$-+*L&10Y-EB~iKzRVq;f;vM^}G1y
zE3R(VhecXiiGaXRad5<B>}`%0Inojt<OX+kveNu|?ZBr-ETgA_&#d|OscDWFjb}*-
z8~zPQxL!cq(T0hbD!+SYPV=%{zh|n`ac+Jd`SPF=Fzom6Q2Z>y!GW9G6X@@6Dmb3@
z>TfOd=3;flA6{b5H1|M!qE66A?){mTrfjYObQCHsZVyrQI&0cAo9!7D4T`at^S787
z?GHQe#3mjxF}40WB_$neP1?*~I=F>WSi}<Gz}I+C1&!a@TBb_=ZVInEz*RDCTo`|)
zHYTAc5+zzUe3m>)X%|d}{pps+oz%ocfx=HFhK2>BE#JyKnCFuM0%Z3$#}QGy{WwsX
z29ytbVWn5RGIqa0d8S-^1I)_dISCjUy#S8*WmOs*39l2t<4Q^y!yNaZ(JPWsF;4Ug
zKl#?VjlgRhU@stOG7-$UOiHujHuz9pfAPgbq^+&R*Hc#~Wwn&L#wBVqI+`?jBMi=O
z+~<WfM*6hBC(0r!ntlZ-`JGG4%cQpatE+8EhZ&C$UkfhZTAx{`xN*D}tNsiIV~n&9
z30~Y`d<TWgm$^C0r87Y!aF+K5svsDkgJ=&ewb^&<$wPr#^Qa|d_A`gftuH6W#}#a@
zk+_07Cowa#-DES^-v`A-PcIrzx8FjeHzPFE;PQQ5-q-E)oPP?TZVzLS2a+vX<M}n&
zfObO8g&Oc&qmt;S>(V!0c$tPrehbW3yH>|Qr%mfFD(W9~YLt;Qi@cjTAWtc<TEv93
z$DMTOU1G}}=UNxeKsLKP?6v+TpdR=h5CFY6!cJVBlFz%mW@)J~_SoF!RzHXpn`S)H
zZr(frXpw2F)|oPtPp|WB@ACJKMPzCy-*tC$djM#@;D9i!szC3IJ40b{3j=a!DJlZl
zt@*oMmCKzTRAC`;9)l@a1%+9Erf?DhR{4zMUEkM<GhZSO9uXwv<q(3J58$RHq@vB~
z^aCBYUr<eIaDUcY7ao!1Eddi%c^Rrp>`r72l$}7%MT;b^X&7i|MEV*G|L>TDehcO9
z4a-(4w*2D6#Lrl?%<SLV?-NsHUPl3ax`kCGCkc=sxV6fNOAelkeNoj)RYvc;JPH@r
zi{~~5+OKTY)OaC51NChg%WYpd=<yO1!_6jHgGQ>AHtNflRKkVyw19?9^|g1NA`z6*
zob2r9I=}OY5_(4DvaW&5HAb{5%o&CBrs@8ol9^d}%HEHNqGcduofH_%gGA&|jg2Qm
z9lQjrQ2tcek1+7sw+7+RWF@rRAh`}gg6nVzqkP+_gaR~gpa3;|e4Kx68G_Dt7wmiY
z<oEj{-w&gFiwgU^#rt}H3nunD!afgW2jk$tdoacvi>h=}ko_?~Q(uD=td!;D<S=-6
zR6e5pMfOSPyFVOu0NyEI{QWd_YYH$^Ap-*q8jH$XfNYglRwlY%RTXa<0`aM(os36P
zk#OtSG|o+4xvpGsG_*rkHSQjo;5$=)v#o@V16@q7xT#M_aR*KLM6Ay(Mc+q5x$TSc
zC?jXJz_SQV2ohUNCv(#eSX?;Whc1;wV5sGjGZ`=>*JlJ#A$td6vNFGgY4HVDs6Qf6
zD41osdJFK2Olc#9-f3z+s;;p`e+MIJeq-WaVM6(i-NuMf>0xVgv)Z5K%m6M8J3BO|
z!`p0szB*aiwh`CIZI~eA&SpMr;nmdDrC#y;OHH96C)XUv^sIj9DPy=^y00%5&@UqQ
zJ&B3F;rTtqFcmQ@P4QdB0^rgRMeNR(1$J?JZY3)fp3njIih`>-!E9&`NmN+b*-3$q
zh7J>-B$TtRJ`opcy2b@VEv@S~4<^8QWJ2DN<{wQ&t=JgQW;R>fv$HqR(MzYftrlLz
z)JBx<O#5gW#gtReo1zGX5kA#g1z>K1xG!?otKd+?(6G%^PF`$wujET<gRFL&$^rl4
z!p=OIy*;ky^-nFQ_$oaK{gu<=TG~u3*FTA*-UYy3+5N*i4DQ;1;Nbo#;a9H|Ou@SO
z5wPk*V@C})Z{=zr#%K;d|6!sE-F5sJWO<CmRGlVcBB-Hu0`?tULzfdqXH3n*v^1p#
zVrn6O<8uBLXkOP7fCZw8lMpjr<kGJ}qqf>r(ESOC2^z&{sGF6mV<GfemlQsKKT)Z}
z;JbBp2Po3H?nER@CjYEC<$XV3ml&R<ks_%LU}-?b&hAG-#&%#X4bq<AlRXNe8g=+q
zfXwJz@UL5S?<VclpRRF^NtuTh)$==5>x;wM+?#G+af4^R5QT=^-2tq=-|;dtQv}vz
z*n@O|2Z)tS@v_3g22dZ(f`X>R$gMM)4c8MLm+*ptjg180laiF(&ylq1twD!Et`Q|r
zcd#<zg$pNI{Cw2Zbd<vQYEXyFZ?vQ3A<Zi_IcmNqb^i)0SoiqaT-;?dWJmHfvDwQ1
zuds3@z3}5Ez+9`uRF5?`{Kic`=MMVWKDw=ik0yi~7^;mpHS$V%pFA|Q2|BevrJ^Me
zarA(ZRgb)5ZoTK|&!j8`Z5zzru-4}R0I&a#y|0XlvTfTP46rBx=@1n}q$DK`LZwAP
zx<e_EmKNz!P(m6647xj{r39p7=#cJa_Icyux8LV|-u11uf9$pQk8jp;DLD7c9oKc{
zaU7>qe_Cp@$tgz0X+@#f=ikzZp|_=aP&B`=fphuuqrCHT0sVR#4b|1eZKme(*8DeC
z>2emv$D2}3Sb604d$Zhw+t8mwh!DT0{qx|lVko7$Z~(4ZmvQR%$;_-Q?T#~NUYLK~
zErVtnf;YJT>N7wfph>t4=!DUQ0+H7t3Wn4hIoPx=rJ})hp<w@@IZsc&SXZ*dTL1cV
zr^-e|lDFV}Q`(werCC+XCr|Dlev2cJyq%^fc|kJdnj9IWLqwn1nL_h#B5{(OkqOw3
zAHPR!S7H{2%+I)N&Q$qg4;NabwS1Rzaw@BGnx6-3Q62WZIU>JO5);#b$h?Em0nCHM
zR>muIs$|}sKjh5ysM*yH2RiVGh^CpZ-C(5~lp8XIq~_V1c$GB5S(isF!rebgSXfwi
zc9lJJg(M^xDNyKRK0dtR3jm?Ls^Bevt^4}N+?=twpWzL0D`av;a6sv^E<-4AMAaPD
zVF8@B9wf`%VHN}yr0eKaP9(OxBfGmV1hA<SHu@)_RocH^mg|A3duTe=8m(Tm62~$9
zeyoBZC#k0Hb=o8+I}hzZaccPY>49!j52m`{vBMO{#6=0IpOPk0+Dy5dwh)b#PbIiq
z6uKj}RpBfYcz>yHEt#%Zjy(w^<{lpe*7f4x;(8w3KoB7(C@EEQ@<nubJb#{ar&z0c
zUT!^agidg-4!<$f?Nt1E??sl)lH$`t^}D4sp9Ab9p1HBz{V)?iOk28)L{XGwy~^_P
z@gq)sZgh($8hAws#=x+SL2Y*wI3$(vcO5Li>VifDc-J7<#l$2epk0X#ET90};T?Ri
z?xK6*pAU9`$(W^8bw}PJYhpqadYS^J*A8(|UnquIK`$U=FolOztKQk1P<0y*1vv{#
zCKE*_RI`KAEw`72%}hXE4d30y?-3M20J3pEddvj`O=^G`&R|ca08XTFv&&ZGPL++i
zP4<sPv!2%PpA1P$GJMaBU&tib<po%{*3Xp(N$wL4>;TwgngeN@yCc)2l^;P*4BHjE
zySw}42}Mv}qC?#mz5R$E12aSz$C^gBI2GAr{%UZ&e&gc(@4c>O*`t)id*E!*U}3T<
z-+jfNnhu!mUb@!mLU8`PFF@m}AqJa1F#tWFfzh`TF?G-#^#m!3-0cV`e;0Md<I@gj
zSYouR>BAR1Jv}dEG++1F-Q{P+Px3aqFBD7s=o-%x$;5U#Ztls@7|Ac;k5uUuH548O
zo6km>3Xy9xK#7!H|NA)u`c2TU&9YsxK~=`xp4VHMpTFMjs-u2NNtqPek%H^Ol@kVM
z-SyK_RoZHZ&z{fBF?Jc~S^|{V*f$SLGC{km*m&o>zJ8_5`BFlLhlh8RQ?j`PoxOU3
zf^p8}a7SW!eZ3AEFEH(sfU)k1D6}%0!!4d$S>-l7o~S*R5#WT@!J@1?k%wONJ~_BG
z(|$ILHCh51WASoVb7wz)<{jvSro{Fh`W(+G+=WD3IZ*h}ZY3qM>`PdSi;s^X4CLTJ
zDUp#`mh_WyzuMI^kt>MjIfFWLHtD3{?41Wc9;)_hKYr{e_b#hS!t<EvA#Q%4nQE@0
zoHMa_?A<3*A5V!9bj<d1he!5G64Wf*2LUCq-6BwHfmsvAnGRb#{!}-y0a*w^bM(1Q
zLpQf7yMqne<&}C#v#0W|Z!aww<U>+rb;hxA^2Pchb=^nMw)lQ*pDYv_Hzy*W7)dtj
z-FTv`d>=3U!da709?yBLcjy{22eJ6fl7;WSOpfKILyF<YI4~huO9TBMXf45741NZH
z4>2hz2fdxp%h%6p=@0e~BAg<BJvEuv2T|R}d#ZAB?Bi`lGLHKq7ou@sqoVN^g2La#
zL*9PvvGmtT_wZXOApW4IEyr}A1LcF{#irW+GKl@(g@)#D?{su3nEP$|Vq&yQhc2xv
zqw&xKrxLEbG54mk)BHYMCU9kG>DRATlj%uvjR`ZLg@?0if0;1{N(SuMz3cRB*Tl+W
z_4Jd-tpf)KsS1mVIGx=ApO64BRPwOX)8}E99oYuU$olMfIKMSR$OYn`xbpI(=1lmo
z0YR%%48eBjY;}znpv&(%?pt44U=qfM+Nd~SQ$LPVQw#W%hMjA7g7XjeP}09a4%M_q
zKVI+C!-jevDK|>t(`N>Ere1jiFfTE1>F4K=N>4Ka>L4-!#+G**mg_U8)%xA>h0WH>
zdV70E5`)S|I$#m1w(lJK%VoAd{14FTWUmvb)34~vIHRKYDf23xpHGzgBz6xZ701S)
z<O^O&z4%0eWSADfQLCUz#${yMooeqLSbo`_+x#M!=7<HzX!Z1FVyFc58lD?KYcKqQ
zrs^3FkCV@BY}(BX4U(ZlhB55kiivEJ!Or;lwff8B*rAn4Ax1CK?Y=^b03%oQ!UHEK
zYJj;S{kYtx?${pCvR%k5C@}m^g95B?!>2WXb8?2X2B^0Tx3pA`2=DCNY|e*#Dc9I=
zh(1e_<Jq%kWbN5gZm0r<gY=9H1f|1gL4O`KGBV-~(7F>RPJFAc2YsLzwan6^X6Dv7
z%yRf?Kb)F+E>(Sx)3pwzEK-4j_f??*>MLBHkl+f+tu=2i;XpEND!&1Q5icmzZry?w
z7@>Z5NME-R7vQdUdU{U-Cjq2L^<G`MbLZuFN7C9%H_Pk3EkHg4@LHEm7f^rwrY@Lt
z6w1($l%e-YVmldis*V{9DvgsX<jskW3g9m<dg5k>eivXlEhBmUvi6!lcj|(yhBIsN
zR^d)-?Q56yo-5U+re>@IvQ2t7AU@IHDil9QOY7p7Ukwrh@$E+8`OvnPUR{B79Q!0K
zvd_zH=f=jq4B0$?&b3Q*r-Xr-IRx9kpwjJlNqgR$U;jduE~CzTuMc#L0m5X{`C8*u
zCOc3Wt_&2Vr<>6q6fS1nQdTC1klq(mp$;pg7k%J1ZtqyT6%^p}%9v)yLm*fQ{cqKE
zLCE?>K^Mt>pYlR?EYT@Y#CQ(!2$C!4@O}of+3j>duHJuzBR!dZr3Z2`^SrF|9~u@f
zUKE=)9oc|(#qeMVseKk=-&#0$Yv)~9S;1)ih`ZR21P&;!Ghy7MP0z~dZbL!~P_#V#
zAH&19=afJbO{bNX(zx&J`EXq-=ZS{feEj?reZv#sc?X2X?!cGba9-11tI8BnF}c3*
z>ldrC9J;=~ZR{vxzxLjj&_l@j7a9E}{NWYT_sb5R(DDBs+w~|p@>0Gl{%yn{91g*X
z=S26QhVGb1gV>FauOA?wMqoUc=z|BrwSt<!bJ^XZZTLtopfAB1Mm{Lfobo;*Li?w6
z&HRt<aC3IZgymN%!1Sc56}=+7@y@rGcLfAY#{rHT9Jti8#QN6Kcc5W*mWhn(YLvhs
zKqZ6I5nZhNHpTH-ch}7OLB5;)`*a_O4)_G0Um5q04l($?`_yRV#9!D)Bjf+Dou~e6
z=hwHdcoJYo+{ev6N#RZdb$mM3ba}da3?cDK8N$F~(l*G>Mp93Ahg>5PZAg!x0nGUn
zMx*o;RTS{D8CXv=IEPHxYiO{71W5eQ;$UCx{E|8um!Yoiap=-;ad8c{PnM;o`V$SW
zEH4+2i&}uJbIU0daEYKCa`Ey<(wtb8w7Mk8Y4gwXPgDyyzswhwNS-d7aOWR_DLNk<
z*`j7rfx(D5>rNd&sCiz%WzDic|A3W+rK;9%8bGB*7#H4dGLA7bsc`m)J~nptQ!k3t
zf`2@{dlz9J9Kqfqx6qiYoc1&*WHmx>@QGtI>6u;fZ!G~Vv?L^x+XaNQF1XN-?KHzV
zVTFY{anjmwv*abW_?`=JFNoF$AVQyb0kvVRfp`Fr`7Jq|IkOs3Nv$hZ`+BVL4&=lL
zs@t!C?e&-=AbEjeBKP@GaG<TVsq!8z0YSq%7AFuwRw<=cR8VL+^_Wc8Pm+*jyP%g}
z2PSC7J8Xse>0Twa0kpi73c&ciLqo#tj)RlSy~85SWhQ$^XDsa9{S(@^?d*5%;duf+
zWV%kZ?o`yogx*C)Mn6K%SbzdU2Cct&7N53HM?Pb;TEap%^3x~3mz%ULCg2kiv$GRg
z(0)nV=2E6alFYn)^gPLtdgzbPK~|M-4t-&}B`W1_^_Jb~@Kk(R!Xq0KZWmG2P^5v_
z0=uqXwt6?#pVGn3Zu!u!x!EP`mbFx~m^ccq@msfI)y}04Z1+%HzG^T@jC0daLj&)U
z)aQ1i=i{FGZ1<3)6>u-Aj+$2%nQg+ZXO2!z>OMz$-RTGT02N0pS+S?w)td818!jp7
zivOp;l9HZ^gtYU_iHnOd{<1>^fq~KMp`@?q&;+*!4?*9yav+ifSJ-~_Drb6Uy}B*#
zXh*u5PlxW=;&B+kLr7iWv{GAtfsrRNDykvr^vP1(i<`Jf0H83BW#$PqKMixu%ag`o
zX!9$#<2$xdp`pHjjnVWYeUSR)izpO~IC;#46>o^H-DGU3SJm<E69)VK?lP*k@M^rs
z)}p_9A@`LlK9NM6&qoLV7FR!#1%A)h+a%d?k6eIpLFQBJUryA5`9FoUK~dSRkZx~&
zg9-@%mo6_*p6~FB-2V{Pvr0z{=zKuLrK)T&ZAE%XG#zu_-K0jr9%5M7Ub%;04g7WU
zp*8j<BEqagkaQ{nn)4I3C@$=#{(%8wj6Vr4R?YF?8bzWW59pRy;%{zl7Dz{c3YkHE
zi488#FS}98vrUm#<mBE2K>&MOnbr^Mc<=pjfOU$?egHxG(T>Gp<IIn`X>eYrQNHTB
z4R78CFJ&oZ3~x__yl>WAbFG8bZvd*nw28mk$7&@bEJc7?cHwbF<R@^~kgJF?=GrdK
z500%F=zWAjq3|8Ru7?Z@7Ip^DIikxC0-nu*jcEJ`!^{rmOgzHFC11T*KmqOq97cQc
z=SSCoMa8+7l+3_6aCoRrKsD%oA4cVUsTHY^lM{v2*43rnk)@$AY%s?Nz$WiLJlL{f
zYGEIHZFCke6OCK<iak?OctJ8{Krr^4{KIc&n5~y+zWKDyE~0ner0Ld_KxK0VM6)Kw
zJ?_X$JJDDeJ8lhy<*M-B9%MMRz~!{QI26{Go|;;kWE>V6Is(y`go?^FL)-j!x7|JO
z(_pT>rygBs@jVV@)du=uWItW6Vqj%u9Ye2GY6l0AV!KM_C4sHKyh8!;P*a#o?e@73
zds44AA0*y;Dcd+5E3oA}H3(da!LjdWv?z{fhzj)UBGAJpf1lxwlQUV8pML=`LYOb*
zOcyW45Q(0~TWsA>zSC|uYExi#QBA$6t&Ovv?b&IkTgE}v=3eDrzI+L0#yO7TDJkp%
zZwTHb>gNRU(${HecRCJ&sBYH%c4XgbabDB2dK#h2h1MLU&-y*#A47AB-xD4N)FXHg
ztq!S!=wLb|`<zMvjS|q$=2`1;%%Z=0%HxOevuEpP#*ha+Sl|WtGni87!tziJ7&Y!W
zJAj-H$bSDCT>;I{BFoVC?_bpK?(ULXXJBEe<Ms#F#mQYo2obD8OiWk+b9w4li}^rs
zCRP=q{qtClt`hsZa-krlomD$=8TzqZUGwI`!p_0-4KU8dj8z4AA?<B1SH{R$S*}a<
z+a|aj_j>V^ly!OfH(YXhwzK|COpL+0CT!d3Cc*(2j{A<{`ERc`7J3mw@bA6#@Gu*s
z^g~bpaL02YjA(aYpKujIgq%~z72nVcJVy>95&%l+Kj)roZa!z$H4A7lm36^O;+bxW
zP&)kd<$SD(F_gcuZ>-%9ncfMY#N=*MqbeoY%CHO#!wlNOUjc-S`xgyBNT62~j`|Y8
zxdimdrThHOFq-rfeg#uQ_m3a007Y2Izq$q!T7Wl^K16dvj|>Q6RVVHI0A5QSByva<
z0xIORVBSFmYi*=T$Zo_<B5xo*UVBg&P;$Jxr8;f=K-#=-ZP@W~HkiRqNl`Hluswl+
zykdJWP0nA);ZPj-G*#n}$2Xbubaf@>t|yPcB;AyVN*BPUAw<(^Pj2kCg{i5kK_!KV
z8xjYbD=XDdV62<R0O8>hVDgr30uup={-i+hOGf2lNtnjV<FNgtN{XNvQ8o>gHc+#C
zUE$)&lcp=tM0_m3ujJL?0nUxBn_880YK70cN3uY-!C;pG1w@^lp1w1HRD;^N)QA{N
zjvoPt>AS}ll`_OR7fgY;TU3ee?QOb%fl&vJ)RC|P5vaX;J!qL9Hz<)+7$CK`cVu51
zvX!lAPxLB8UAs75Cq4En*lysV`|9eAWFeT+CI(!d#hurnmb+}K?FHht->Rz>N=$*-
zeDSX5I1ssB2Ib`ES3#!T(A|!Z7n-B&X*(4GCrk+_A$Ge|Xuj3?M^t|N-1SVR)YXU_
z?X-0T6cP6^PIID{8HSOtm`V54w{LIyHGy?&IDZQjMX+AuqrmZU-7e7y8=zb4w|gGK
z#82oz#6P-rCCJ4KA6zgm7Z)A>Zm?J>6752h9l{x4tQ_|kOD0p;qPYkVb-lWM9f&$~
zP1tqo-hhr6r19VijNI!zy@Do=bw>tWtet-!!8tt&YzQ7ZGkAi+PQ7s(`}=AL&}Z9m
zpg4`4TjwyvVX=tRxO@NdXX>>L{ra{$x2s%^Lz4-5lKwNI_wKQ6?_#qHUyHwGWMV>`
zEE}6PwAjym3P^nsPEc#sS!pu|f4$J5^jJ~xhLZ!djb{e?`n1Z7QYAZ1r~`6~@Itq2
z2}@WLP?)*g4_`Hg7*^KR)zPnhPTO1E-ZqvhnVz42H8Qe@fS;D10DJL@WGMMi&lBG=
zhW!{g7?M~s4x>a=C4v&og#}9yM=(K2?=9e8SV-ni)woLwpwvJB8l9sV$T2iu6qw(b
zD<<vzH7xX6wNM%`lyey(olL_9r}JH)yHad}+mX!l{=sW6{QA!d^;h~H+_|0i?%idx
zia|AvcYVOc1P=)EQXyPCv|Qe#zRXvRc8<LWVQd>&gm{!#<goC2+z^`w#2^-a^bkCf
zfQ5>1<ESNOZTYbk3RPZqtx7G13Sd8Z0kdwVrE_I`$2eNpX>i7ng_-%Tg$3cb!*gqE
z_n;tJs25n%q&%{jxF9J1wJTwx6PoW+pJLy>#UUiO|1mQT_u5^%+ANR_SR%_^O0jaf
z(!XIp;pbNI0m|_=4AASHHwqWvH@SE$gq3US>(AQrzEyi!Vm-eD`X^*rL~#}!Pa&xY
zQGECfJLjIVv@*o%>H><yQrF2&qo5WLJ)KohFugj`n{}6e3rQf%=ofs5Bvd93KznIs
zAJo%bRU26a9r@-LaQzH7X4*p>@I6oHT3y_KzBoVsP5K!L2xSLC-HI>7X7WL^sX_t5
z-Zw67m;?s1MzwgLS|AWHZ#;z_T<}SY_4lV02!Kfg@%;4C<fOjZfoWh`+N-lFIIbNX
z=Vi8Yj^qMf_z&+v`2P*+l$U`G<s?vOqf_<DBVp@j6oBeE60A_PC?L!QK#d?>h<!b<
zKQE^aNXJb{u|f_V*Ea;f+XxtpR6ci~COM<Ym7m3nj?bim{Ncg*XSq4L1G?(;_lv&=
z7xk7oP=@h1?NR~SeS-#Bjo#iR5xLOYD#JRH<|D;moJD44oT&KqZAdkC4X_s7>@#}O
zSKQXJvgDg>fGz^HyS6B$>)Ul5P`Y>x1y=?ZzCwYX?o+eCI`%Wo3DtVGmyn!{4Y=o5
zyQY36OEFrRtRTy*xN3>e;UyhF5vCoMZgf7xKdd?@F81GuJ=d4&g|{%-!5|g>EK~Xe
zr=i=&{2~_9==|g_U(P6{i&{Fx$(>LVbeXo?p(MBW#!gCWKtNGY@`r}6Wo|a_?c4;H
z+x`H_dR~sl1bFV|7$MCiVMyY`x&6?LH&#(O(H}lEQ-f0Gb?y0%w>ctK0WIqreuRX&
zH!<&f?Y{T`;_u}6>{aLm`7s?29jV|*kxpGY063VhB;=`H>w!0+JJ}q$^@AngBCt`s
zfUrF$)Y{dBJ6<n4W%7CIm`1?nnLRuzYHAK3IaKX^01_eNRM#M__OEQ6GqL8X1tiJh
z%@|?|3WLmHAn(GXl_*>Xq3b6mXx#^|U!8>*nREOG2cZ`%iAPFkVj0Nry+H6cPCaM;
z<mqN^yb9{wYgtP?Yg0lWd#1AT^9j==iw_7RZ@RsQiA7o+A04dnEr8%y1$Ef#Uu1hG
z{kTE1dUxGoG4l1Jl}ey$TP!K~_68-<?Z;rDAlv(NyF~DMsz?qWK1xqt-<LK2&XJ)R
zhy?r4+6}DaN7DsCk-Bv<31{gR`f}8#IdslCz?3K~FqLVWg1b`-x$i<4FBRp2r>w53
zY9HCwZy<1{`L;4%imR-y9`OBvVyZOogg>Wf1g{G@)cF@Bpv`r4SSj@*xhwL2u$@GK
zF(C&;vC0+A4E2(4eMZjCSm7MHfvvhoF`%!AA^<x@M(kHv_h|M0F)AVkDRG!{LE}<i
zJ;+-Q{tSR<v(219>1$nsXfs^WVRtsnIy4b_qAO#5etfZ#;JsQ!jOL?q^S}JbIJ7_i
zr;Ot`(nG(U`{vg(9=Z1J?h8Q9n-LP{>tnxef-*5R4Jgl-Vn6_oKgt|r+tEPA7)68)
zI%-d-04^=u6#B^sxp!#;_|@N~Uj_tKw3^^k5C?)~A9cr9)auJ-Ye(S2g4JF*$MmeN
zH=?!)N<>P&y;M<o;HM-=D$`9PXh#Oyxw{AhQ^5*tmv`qRe<Vr9wdw*@Rd@7TN}-{@
zZ*gyegRt}dDbi(Y%t4SAa69;eES^8Fflg2LNfsZUz9-l0?Qcenz%+4NZLk~s?ysO#
zzr5bbW|<(8B13JOcSHNk`pJe_6%Ige(`J-y;(@#jF@)e(_*WbT@<obrVU1`(MKWQU
zid~C9!+8fcQFMe=L$F?26#vXG&mK)o#;1EBQ1kO9Otb)f0>6pln3&i4iVPv6wWOLo
z%7;)YS^>S3%Jz17xtJI7(60;K9s2R3^5h^sHUBZlSJv~FzTKb5%gY0o(`lwz;p`zW
z1sYF3_MAbHp~z?3$7e-6?24tFqGH_!6XXYgU3HVuc7uRv3}$9G<yn{5ns+j%+8f*4
z$}_?YgpT>N6xjrjbgXY0)S}WgCfx%e_luyT(2i*Q{(YkVf#gTv<N=d$yd&0risT#>
zpXhoxT%<3yUIYb%OTZ1A=z!qGe{a!2E;rTFbCWQSa@}HQ^(2hcwlLiXnyZ@^t@C;4
zyLyzAFhWsMdw2b&-QGfyn!QPr;|;wW5W#$L3=cWe(iK+HWn8W^7X<g_zs`V0Yi%EY
zXhXXCfM^p8be8oIE{Rr8bk#$b+j7hTX+NQA4_w+*Wp9?Av@}Ui1}+)<C$XNz&J?y7
z$5pZRIfPEo!i)9_2??p3V!jJtUj`N?CO3gYSb3eyaozFm!8vKK6Py6tUmqe{?hTqU
zR865yJ|G!|3u-oMu?**~30qFRZk^lR!-)g`BGv!)(jLnfsVA>6byPfA@3u<J(K4;H
z6l7$tVQf9onUl2p3$wEU2=FeDdf^J%tCtKI-#RN}Nx)aX_EHK`C%aLPo}&E=IiGD8
z`oAO8G0BvBZ|=lb?(dw1z$M6-8N^2-(o(~}O%H^cdKB^5z0njM0Um^yXboTcfsjyH
zmfZ@Dnkpr&%h1PTyP+fXKgFcZskTN(MTM_k%cr}oyYoPA*K_Ku-lwi#1LA5;RO8D7
z@fp7Uf(_AVh*UDli^Ekvo-kUUEZ?|bUO@H?Q~UbjCFtXViVZ@G_sqx;DYiOY1EaXJ
zjM__1;nOmyc=glAp4-uBX%7QLi_Cg$RTUO2{J>!k(z>8n|J&}p4nR~M-Cqp#@7+2F
zsH@VIx{?GPPDp)n3|gvRojhBF2I!9mwirAtTRI36K}}?`gBGM1kRAWi`78vXJ(`-w
zC@F0Oi9kaF0O9-@SJu}coj{6{X{%HZ5i<#KD$t%@IL8zWztl{5ez?67veF^x$2YJI
z=vxcF6Fe6g2&Tuzd~5x}e(l@LPy8fDz)HXrt~&^Y5=|e=!-^0GK#Xq1eE8rGqa_tt
z9AF?-ZIYK)Pz|u3i{@au9;M~<Dt#-E#<Zu%yx+#gdKL0H`)`6m03CSe5C(`y0sQ^i
zV+CEoV}5vdeIL2Nj-*)K*$&w(y~Z1Wh_Tp<610Cu_!<XgJZED!o5Wk_VX-hjkC+e(
z%Ui%)%Qu^xu0dKPgBv0L-iiD#?j0(QS|1BQ|4lH5W~zh6VV)e}KQr0_J`wQTdHrZ)
zi~4wPZsI*DUgtz~o6^%QxMzSFeo;v1@wD~hYtS|~y$EtdGl{a77#S%W8-1>_vc8Ip
z#5s1X*cbc$`>-${>?~k{;U4S`)k>WQ3Gr)SKA`uA2XLP|iS4%-LaK&_h`?cpK|H@0
z1C_|U0VEW-xhA~u(GaRd*Pmn(KsY1yBZK|cRi04Iw?(G`#%yP2cjGDGQJ<~sef|8|
zGkU0H<Pi)_2L|pmbR~Y2`vF({HWcqrbc~E=dCm6S<KoQvb>U=J;0|46T|8qpSQz;8
z=LDvW5&s<Jg{mPo6cvB2#55<x9ngXRJ)3Zzg=D^P@FgI6WYMF37XaME;6dacKRyW!
zjrApwQ$jD-Cm2vEA1_04xt9M0qK3mp=@a+>E2*qB0~+vkcso2>d`3n_ka^T<c%vO<
z<PSI*b?)*c{cpsg;*0g5peO2nTQ<s@SjYf0k@|f)U^S19UIGqg#Od!c4<6hyGs9z?
z0?}+a(BXjU%^A?0hfHjAZm#}BKPd^x{WGOMjkpj75;VF`GYs|horE!=VsI3|24IZD
z86_orNbN{*H!Fab3@K01I_MK<FOO(9b8@}MfT|1KrAxRG5l=I7a@-3F5U82h+z;U3
z)+a?~J1-3uorK`ylw}*T#DSpa4g?URy|eIC;6v-*F>x08EFq}#{2LVd`bn7uwm*_j
zp0KI~_X~_{8_*B|q@gEf$#9;Kkb`D)w7O^y(4E}H*CYI335|+i>>~*q^YYES5cC5O
zLmC?H-F^J{%KQTL$ihPPgcuQkD*5N6jo*Y+4`4xYtQs2eZ(?I{ps?7lLINYWa(JHd
zBF(1tnXH70uI}z%=eQogO#{wjJKE~xtSUWZEJ!lT(C`47&_H!1<2CbD6zy$nJPm~z
zDF<*J%oMIVA71FG?9nqbABSsMUOTIWaOS*0XP-_;hy<(za&I!sQB+iB-B+@l?~=M4
z<hdDRu;L8c<ksiO(@ZC_{$K&VtQ7*FTf4@a!!%U(p()7U^Nvl1p|x7|jg9?CHPv22
z!SUnA%Xb(;s=K<VV`4N^C`Hp06Tf`%B}_MxRINV`BXD4l<6AOeN8%8g^Bret9hb=g
zy!s|2<amJiai~<ny7$Fa1foy>g@InA^yB+3YXZSFadN5;WSoxRG{gce>$JRfz>Q{s
z{z6#~aHCwIehRy8d9kDk5ue#$v|gY%0r7Z(X>#uv0eHAV#~u1hTE-v@1YR5q1U7<T
zmBc3}?_w5SP@aSE2vj+r`>CiEoo_J-qTt2@3GjYXm=6M3=KIq+G!TK<#_rB<gAQ8M
zkoi+#yx(20&{gNTU(YN+9l)Qg3i}W$?qfr?VQ{9$cXo<Uddq8ThOfRP?Ot-NyS0Yd
zpEjLRHZ?I>Zsuf5%*-SpCw~e?$qn#8+dC(pR}G-#fZGcE7Vmy$(3h!&`Bf3?&{j&2
z2#SHKjVNplFnTbk1u9PJxr=Ea+Ox4?ZNSW&yu6dIud2-o+Btzx_Ixq!b3Y^*o=`g+
zbqjJ{6O&YE<FToP!r?q-YMoO~L7xx8i^0{nsibu?88ITxuE@LNrgL+{y$aL$W0nEc
zEM*zbh%*FSPZKe4&O+nRZfj@~ISHU(f$aSLesN`ApP0iUhzGS7U#SbEjwGb$_oAeQ
z8=$i~;b28$yE)GUbe~-5wfnwo-BgEZi4yqq^g7oqQvp>0Qw@A!1`hp|D_DR*m%H|U
zd1VEO;%<s~i6=e{;n`D!n$z}pkY-WsC4TD{-^OZb0q;x-!#R*vt08n%yjf>#R>tgs
zuh<a>D3mcg{egVxnNC9#z)CorR*(XZK{G;U1nm+6q>VW{%d)$G)M^o;wLLDF*H)W+
z*p{|v_3rr(^GmxIE(thnzRTAP-Nl_y+&<WfT?UUB&IR2w$S1VNYG$uqyLQV$o-m5v
zR(!g(HQ_AgXLq;GLVxT=KQov!vVkIwB`QR8FD@bBn1{y>yxsNTQ+zO_R=+MU%6>{u
z{{~7cO-YgmGOYPOVq-N?Fl#&HLRp6Oob%`fYvY$ez*L%?AA=iy2}tVDDysVag_;VG
z1J3Rc`Sg~ne{k9ad=K5#8K?9pK-^gZGyCq-r%V(Szu@Ys=Q|zGU1gx3nVW0t9Rw4M
zFTBksd|<_77=|pAAi-5GL=<FYDst)KQQfx7s3)CTP*6~8ZLQL6=+l=k6CD8&AqI=P
z_y1Pe_}4;*^cxf%c+#_kM4yhKJnqEf669uSyWb8DF^@yowz?l=`-zD-p0)0*83ML8
z+(ra&l!YY@kh?$~2o#%$4j=<K2at;zcs>#9;I35Ok~m>GKw>4bpBa3A4%+Jjn&2&~
ztBE2a$Wg8!y%#|zhT?Oyt7tVO@U70()1R6GfvW`70-8Y~9v4!i67GzdO?hkwNj&)q
zd7ONlC>b4dU1Lc7^O+yzs@H6Rz~Gjbhr3k{b?=ecS^ed0fOkL-0b^FO3&n3Y5OO~w
zE4U)4kpJ$%6~I~P$_ajgRRR*K7Xf(yb98cffI3kKs9H1b4G>}iJhkOs6A-lB62S!y
z>aB0gxm4%09ePE+OOv}=IL9pyVu+w%rv*&3%R?BT8ayf4Bo$vy-*NICGPZ<)H;7tw
z^g=J@uz(7NQe5C|SO5Gd!C{NQYKbOcYabpgH&LNk;4U?_(`i^&kay83q(gxidS6~-
zCc04D&opR}Roevy%gAhsrVhg!Ae4`QNLg15jAojR(kge@vSDCv56{-ad+@+_rIwU-
z{Jqk!&M`Ht%ErdVxKpBHVkdie^LW5us>lyd0gUJAo_>IMr@?{&C~7GZi_i0_gB46t
zK(X`hc9?dWLqAxnGub*^1f!i!!^g)r<5&mEdK_O-aX07v0w`VTp=>ht{R?!Q!2pW|
zeTJ1DBQzi;c3_o<K`w{JX`MWJA>s{;f`O%{6pV`dyn5farC-kr6f%N|aE!8vtWFaF
zK^y7khFwM(;i=X?>??QTOifEG+6Ui>0~{N9dChL&z|tfOh~;Y1==HDnL8029JpOXp
zOlYRLS$1RXu{w|Pa42ACfe-B0P4f2vrp|N7o!Zg)W<#!vLk{fa6soGKfHfik;ij(s
z{Ng$?h~=UPOrJavF{{AnF11#Ve`#}YtDv}lNmW-h+oZ3~fWs~G3X`nSsS^+GbThPc
z&p%ySP=7fvFulnm+ds%)+WGF|X-TSM9<NWZnuhWa-03|YXx__VoOwDQ>v)}OR$6WU
zb>-l^wm}hZ551>)0oMaUcN}B9yl&QWeu%Jbjam~x-<%ezr*Rm}oV9GV@41~}v3`I)
zuDjrl9#0HPkA2%zE7f40{8CCVrj3_=tW{vio40KCCm|ym=5N%uOVAQY&^k4LYTC~0
zIb;{!DypFFaTqEom@L?PgW;p!0+E#a*OjyNn(MdL*K2IcEmyQS58OdU9Jj*Mh<Cqc
z1+YsXGeHS|1g6jxTf>_A2aD2O**8ccmaNj5SFc3N)K7+G_^>&SHeD(|e)hukh7a+$
zPW$j}SE1g-yD$**xs{{7^|DRC?$F}GLI5bCr|!M)^Y50@VQ8v%-Ztq~9CE=#Tl7CQ
zCtp#2aQVE&#9N8lw-Pk(^$#$K+xycMT<KdNuvq>iXDW8wGIno3n>3GHpxW-5S^19P
z_%jsWV`~cY3z0#N##&l*tmWHtE4(giliE9C^l!a6TkQtCP0>b&<06OLHuHA&-2vkT
zW={Oht0A=K41V41Nofkp;M2R?s-$6m)2wLH(8e1zl^GKgvptGmLF;k|bAolyOc7EB
z)Sc(32OKebVdB6(?%wn7mSd$Cr;_B<sHfgivD{cW#D2l|?3qn1r2LnK*CIs7SInX7
z?KPN8(~F^<D+q9NbK7pU?XE!|4E2cbn>lJ}!qlLXmp(iX+Ei0gvv|6`ZY67Ea)Hod
zy}e%M*R*vrM}0s)%zqdYK<_9z?lhsv-V%W+3fR%;oV9Y?DnZk%2-j06XgY07u7tVl
zco6EgdYmN<xY;^fkin8({7WG5aDd!!f7si;tE)-8YzYJ~iRQY8gms#Qx^?mFc4u24
zn4c4GZrcdYb#xIy<eHJ!i0kX~C@Cog1zo|F8qX*i%e5AfwwLs?b}-zyCMisVcwu2&
zz$f#ov5VS^#*@mF7sN|np8rK{I~eSw%TebOCxY4G&a#{i)LsLuuf!m4w2Xw4)6mGe
zK${af)5RR>QbG>DvdcY>2V~>*W>4~Zbv>E&q)czwS(&xsPcPps$+8&Ny(z>R(pUph
zS+oViyKDEAHy6vclq?Q5L>hN2VD_4hn)A+wY7Oj^CO@`v0?aBK+JAU>IEtnRs$d{{
z!LYe#8nLdgb8Wt#JDa2DIR0R?b;SJaEI9|JXj+`+vW7wq0IYUYa`W;6=B%wid-nr3
zM)24Bj{0o-HS@6)kpqkMjg9H`LNF7x@0AXl!eei{xM-@qob|XFE7jZAM=rA4{#Z91
zCuMcdsq1lAkbT07d}|ZH<HBPhm4I2?pU~4wpkbBWee>--J)yqCm3msgy~PsCZ%q%&
zxp;YN^~0PvRa8|iUk--I3KLGpVuIR#$cap5tW1kk7>H-^N~p$)iVE(TY))Ftb*G3&
zqkDQprfgm^^ykj{6pr~y)|CzQ<}Va&_qdeN@9yob?eeF*bZqbKB_LH_?@Gm$lhDMt
z2m#CT#Y>@qd?8ZwZg&rUQJE=7&bsUsEY(AWh#)Dc@o8G8U0o{9pjD@}MH5R;(4IXE
zN9XR&sNjWGuR-$@Lxz&s<T;&#U56JGej8vL-YaQbsMxLzu#s_l`hKolPeQ^WRnrBn
zEwTiDn*v!}i+dv5BL^#GOX~dM&Ob?vyB&q*wjENj#~n6*)^{msa{LNE)VjOXbnV(T
ziKr9h&Id!vn&Y!6u{TXHOz_03@iStxn(7d1_Cm_>Q=9D!k3-7`m%!<mA^t@R^kXG;
zVS01Hcge|hh4b0wfdZUDz+Gfut#FhENNtdP1u(yPKylJ7s(k7A@#7ZL(Z={Y>d{~H
z^|LwAvnomx1C^Dx)NJ~AEz9Y^`D|E>dQ8`bvdFd;n#z{zH&xXY)7=Kihwh~%1=*IE
zv*#x)MI4jOzhYx!j|EGzdP_&vZS5p=&K9nIZ_?RXjK0Z&cG$|V5hHct*03Ahxx085
z1}YlwZ`WgNe{TGIvZS9q_fGQ2ETPMtR$9!RO$VFiu>jj)(ZVg_pAtKK!?=D`HD8ci
zWTz4T#dnw^AvI_-5MWVD66U{q^B8-93A&txwQM~hs%M9qn%ZJ#(ipGL$b9m9V)A_6
z^eSb;Xm8<45AtEnJKL^^{bDT~iLL8ec7X4*INZVTjh^jU=+EP1Eiq~NR6#p^gGb<z
z`$!|;&`HpTn>*F4ziemf=YyEj3olQjt!(G*Zi3xdjS5|Z;UTriUI%V~a%jZ|`K`!$
z3QNowDeq)18xRzN0$*~}dJhKOZ`#@-`fWB)D7>rk$F$O$lI$P5xVQj<H)!urWUsHH
zzBQVywq$tY@Cj&1d519ImnXb{xie8Nhe~4#vAeP>#XZy_V-H%!<sZHCX>ASU!|Z3&
zEMX3D#^-a|0<yES3Ag5EXMIRD9WOfXcG3pTeQ(7Vd@gI!zb@)HuN&(FD^L4pg?%MF
zS;5r?cjTE%m`ZhZbRg2%k4i^z&3(O<WIgRi+#GOZUtD8i3Lui@x9`=3aHA@<&31o<
z(f`xqbR`4fC#tH(YIdXcE3>kgX};Z=uD4PQIWbW$Gv_iY7?4H9HyveLM~Sw3)~$lr
zLQmYF+G6X1+QWmr`u#|75WQ=*Hi2b>pr1MiHOJ}k)SOlyF!r2@pocbx9x8WIMV_vg
zV7PTQ1<ho~41?0fM&3$Z#(`6m^KOL2R73^uulK$9M$ex4gQCn+H5`9gy$CY0@DJGX
zDbbsu?!Wp(rcQ&z<pKTSGQJ2mUl~~0RK~`Fyu3Ow(r8kbbqNg1@OrX>giw1)K>;s~
z<MMFfbc{e^Muu(8bl-r(jC*;k;|pDrzE!;_>+XT^vZaGt-OO<*owHCiTd=6c?Gcxh
zTq_LASaMnl20b|M?FI>9LdK})54-n((NqVMHgC|_>m3y06UTm8+6r>EdYr1^Wa7A<
z7#ld*6y)8}F<-q59Q4AubWNniM+^pi?f_gaQ~7QeTixF9Ry^OqI_IVL4+3`h^T7q1
zRU9OzGQJ2jRHj(in8=T&CR;0`P0h->2+J6RI($-UyhQd_IAp&xObWy<h`v@cg;Q6v
zpVVJj33B1Nz?SZ-cO#;6Z7O@1+SI|}s%n8S2@<2|9CEgqkdNCJCj#E7#zr3!n41}x
zoU$o*w5^hoA)fV2>t}2M+eL3b*4=0OJ(yh)i8QgAuZ)iSt6>FoA+l!s3wz-)M7Ak9
z2W$PinU^4-pj`PZdteb|)32J7j-j<1i7DI~7D%k9V7talI=xTxAu@98+u1fh7-my{
zpRw$sjPMS?zO(rHp<&h*v)h|*YCPY+@qGkFgr(7NIJX!^<8d1Z^}-|!vb?;K@gU50
zMg3Uq<HX@<u&{vxW+fKOPE-AbhS%!&LvHfS{puIdN4vqAxUyKjhp9zwq}{-PGuxcA
zGR%258QOg`Xg4k!ZG^AaH83DDn)TDJAfsqrlBP7srJkBs!gL|s4znjh<#*xn#5*zE
zHgRW?HsL)h$ITqf6~%Nl?qB7Q;!CEg+NzoiJI+iAL`PFwRGrlH>68`W9Nrri@%Huo
zo{Ia8p8nUbXXAkaW`U*yF_ar<#8({t$~bHr*@H8ro$En!ZZA#8><tsnZD(z|wB4Lm
zzm#7>M9x@I93VrxX($q7I{s*a7bl1fZ=*Qn8DieIMtb($X`MxecUre<OV9^<iGibF
z1Wktb^-|RxBy;l@skzw%e&$!i#|xJqZm`uerId0AZ&wA?X6rZQbe9wrF_{(57DrLE
zAkiv>GZp?YVZ7R+j@(fHz!`jaeO*9MZGT>YzeDK_lBVx^hUJ}k>EVG+jW8<x$cp!6
zPp*vOJJHMV@4Vx%jPjy+Nw-*JIK<a26cWNnBa<(bCCFHSmd-b^rys@~;s=If1}$}Y
zk2xXxJGWDYHp`UnQMI4@mVNdl%XkZmxaOkefcS*5h~o{ZuHETdp>_*-BK~2T!!)$p
zl@j6y($~Ss!Po@kHu?bJDWLd}w#|0)*VhV4m=$9&Xps>VBI~RGc;RcCOH2MxGVINp
zLkPVo*qmeSo3r>`rwkFNk{%o6_%$U(pnM}OqrQ=`f}>S<kJ<uknVx!qt@T0>O!RVD
z`EhqEC_+=#fX3nzx*4w?{9Ik9ta)Hg>r02yX(8H%4>^W6BJ3vLQ$t{dd25*?iZTfF
z;p!O9NnwQ)!f&O!pqyoREk>k)AJ5w^@8${^ygH$+{b$V!6UMsV7MUC}ijbIhk2#VT
z!w>@s+}l6AglSS@cBfM7an6B-94=!)w0vKf#SDYT0so{-<uGqy(Ry>qS3$;pJbaG{
z=L7XHL?2$I4V8BF21Oc`Pj74<Ao~q@lYc?Q!4S0LBCKO=t38!0y?r#~#*)JF>v_vp
zCbvg$L@uO6+q~@FkApB9#*itk^y=aV?QHRw*j*o93EVp8tO<@=XQ+6f&aoLnNz$W5
zzg->c9U{YjWzNoOx|KT1W+6?P^3K#tseUU*5lic3XS4D!u|FOyS*E=ssf%3S^_$gq
zri|#^eCs*IlM(TUv$3q+VtyI|u675zdt;je<`g!umja)VNYL0nf*So*VDRefZB8eC
z{W_N!Q&3pQ2NTK2zbaCbKYrZR-kr}&LAfP*_wK>S{U=^8Y6!n3e0g@ibbBmcn^8Fi
zvCF!&d+Q@s3?V*it$RA%L>!p;wnN(}yD?)NLl8PUPpV-z?7!n5DE!j;x@I~3_wQ3;
z5S-5UDbRvD@j4)%0Abo+i2riOdC1GN=mX(47(#0q7ZIQejBk(2`iuEpqla}^?vw`N
zPLwPxE#v%g&dJKK$Q@VwFkB|X$gbJw(d3*Ohd52Q>q}w+j5LLyn!LyI%6T8Vp}D{y
z=n{+D@4PZHGxOiw?FXL~wcZZ{KCXtcs1icHk@#t*%TtV-yCg9uXFL;QbN~L+>*^}h
zFkCMPzC8i5ho3*^13f)=@7vQVY#gvMN0K5p2>y_)O@~QHN-A)1&HH$I3K5xUflwMT
z3@ZqD{58;*ggMX~<|Z1M3=#zd;Eo^4Na-nmPwD8;19euxP&Q4%$;r<%3kyEo-DOA;
z5+ys8vi$CSiyycnR#5w(fL#WWHZ54)dZF|P=5aq!dcv<t6|AAGX@QTPX+vx-Zo04t
zSM`0Trl6x^!kfWaS~_6dEPJO>_ArHS+`j-<h8NDvkL^%=c<!BP^UF^glkE~2fwg{L
z6Tlw;E+8R4-{9Na@*VQIiG=JI7S}bMMXzg=@;#6YfhIi&#5g3Bmv^5r_1x|*NcWBx
zx_LNCd-$^BgKrSk+Ixs4)p_)2Z;VN5?lSlJJATsIZ(S<Ac{m|^Sf5EX3BMimURXWN
z7)9(ysw5^aFJHReaaLYcl{21b0Dm}EwP^JdNS!vIr*LuIF&kU7#h;r>?bpU;5|tn;
z+43ez0cn$9ZAPM?JWPq5#bd}SHEDU4>P5<5HcxePwp&f}h6pjx%&k#3xgB)FgGwwb
zV?i#dyxdH!>5*B6`QeDLo^oHQk*TTAhYv#`*%guZE<?BV%M(~Uj}*)M?|n%&P=feU
z=0WGqXB9<;OKUA##X1c4E}ze`dU~{8FR*;^mtr7-G7xg!y_x4%vuK3}3LZ;PWnBy8
z)6swQ=z8GhW<KDKeRg+?PjfRVXX#94GPqGw?<K%AMztWJoeAEW*uz;2g{8^+Ab#n~
zel1GnkJZ$uGF%RP<duu~pzooJIc)6(JGMFB$2mJN7m-{lNW!d0MTo3FnDsFO{tA{o
zvO;dg*1DS9<GD;pv9$Vxzc2%)(~?9-FJ#%8OTw1oz2su~p~0Na>+6?ijap9UeMDh}
z)Pd|ZgVl<M36M7vieD-}dd%YU<;xZ5-j1OS&gH?L3R$ykSw}Zs(l{8>tMz>koib>i
z`1BTJaDz%+-B6rB&x(!pMm9vm+QcMR62OgtYkfhn#Bkn+Z?kut{_VXQNNnG9KKX(e
zk2L;kusmr5S;5fVgc;@b4U>F5x*aH#t4|2NG+y61#9rOfW|jweGX0s;(l~Jc0q@@O
zQMe6)V%TTCA3mrP9a8pb^xT{-wd`GQVyg(>xYg9r(ZM(RI>fWZVdCuu=P%Ain~fz$
zsAl>@di82gcphCLGR<7wrWd<iLmLooyHsXNvua^#nszhRH9{sucW=`aq;d0^Tr`0;
z=m*YBy3w+%-|Dl?_YYXoU0WsKo-|%Qb?E-uAq%`may3$uVZp2lj<@<uvAer3@f`+4
zM}N)ELTcw=&|NzGSq1a4bN0R}2C-?vm>o9U$Sp`TYH@khIMeGvD4D4`nUaz+IZ1|y
zToMU+6=Y3sbVuAtOLO2>h!}llY>Usc<Kw-(T`xk(i{8(<FY=}U`b)xxD{X;xW?B<Z
z?5}+oEh`q;YJOcWKQuIyWjbJaX{zFIgAvd8kd)8@?PRNeAh2Xt@8BuDwYgc>ohI8-
z-1fA1EwYh@$Z*dQ|BB|G_0W*I0)M)hnVBz?u$1#srNm)2rFE^;TbUFbwn0>9(a}l{
z*-`CA@3){O=--k>wN8GMH+NoBm6&&sm562tuAO2=1A4)GI)=G9<lNTMQq*I#a=1+P
z#WRpLY5we9jNxt?eMBW|1>CZh_Kpt0q&ARrXRsDAO~%O3yhWp>8OF){t@x=yISA&5
zB@(q*y|~GMi$d`Uu3kKHTzrlcsAF%G9zT{u9D(*4jorv%>Xyj3e~uToP_y0*Xi(!b
zUAAmh9eyERx@cXGAKCNsCtth)XwTw<Fq=P6-{HH-vxOXtA-R`DcEOZx8~@xwmXUmI
zrad>e011h~TM+pb5k8p32=Y1Y&KlN13LjB0jcrh1+2*vAIU5=p$|2k9+@#t{##8pR
zlL#(>_&n;&&vf;S8jgA@0lqS@KBbc^hBeTzqgk^6k1^I_emJDP_92pzgjnmC-d$8P
zR}oDJHVQ=*Gu!ONW7<D*{OIzuWPYFsv_i@I&zbXp{25Zi!cM`#?#Qy9>r`IS)YKH1
zKV)H%Ztoob-rQ`aufH}1F3;QB8}S|xIQ#@5YHz}=l7r1ilC!SlrchoP`>B8y<cq#{
zdF-s_wpSti&v;LT^JQ41UPBchKXM80w#(K<7{&;hI77HS=z<YCb0((&N&h~l9GZb+
zZnSqA1_TQaL>|pJsGPy67TFp=cL?&8Iqj|K4!b}B#Y-Bq+k?+ck0Q>Lpive{#nKY3
zF%({7v}oqY0IZ<~DeS9DG?v}U(=}eg>pp~Q(0#-{c`_W;M}Xp#POtw6<vA}y{<Vws
z6vvR;z^-J3I(1890pbDM;Ub&CEy(y)p<Ez68m<7rk8QmJde4nxsS~;wkQOC9K{Xrk
z4nCKTvg%-hVIVwwY+zy}M0OjGQasQQYHx3ciKFk|`yts`|Bv0`IcLEHWjgk?p%+aX
zD_KEK4CXki!kGOWq)@~x*o*~Gb|aaswkwjyP*dgTeS^ED3#R5lU0=O;u>{webH<xF
z+aMJTG%`n%LJ<L$j{bGELU!ocOYBDnP}2ITmuSe#xt<Qj#bOVccqv7JLOtJJjmGc#
zIUkCDRElIzfh$C@S6kWI)^C+>nR=kK>X1SJQmi;!WyA1KwXxA|A|i?qB9eoOnC@Xf
zOJpokR!InFKg$hOwu*y+t+DmaHh(C6@+zha-VmQ%v43(S!n?nJXl1#23$*2fnE3Z?
zD9@tgW}KJZmufZlYp2H>E(KAnm_r%c8x&6ccea7`Rk%_&M|^&Sy}=W?`DY>>f6o)g
z3&M6q<w)@lWt?J{(1&1pDuM;MK@tuQC9hEI%s+d2>R`>i-=1K^T$K^p$OS|QP0zTB
zipm(2JbeHK#YEryf|5sY3Z>exR(=U}D}HWqF|dhElW6H>&r*HSbh$%~$LZ`@D4ORP
zn+L$s$?!&ni1M6(vykhZxQm<(ik$;CeDm`j^{u714_LgR+Oh1s*_T3c(x8Y%HO4<Z
z{lL9bU41X{^XH2IQcg%oQFTLwTf_1mFP=LTO0PI%ToI^Pn|gu-55-nbAy~N#VPC?h
ztAu--d1989x?B)NQVVGK!qh17QIr;yhO@ncnq><<P6`avBR+{5DL5+6E|pdIjt4q8
zQP~cj&XU)VB=~~`&};1Y^hJdNP{nVhLd6UXC33lVC3F?;!tJRck`<(ZQr#I45%}|}
z%<X_3?g>-LBk3!t6f`v{A+SAzRT&imUZ*peQ3w7IA4f6VhdMl@ij*EG6j?P=2nLh*
z>dv1}fxp?AFTeYjAOGv0$uaQQ{`q=?1NZTtzrIC-EX04l?BlTL{`p(fgxmjo`2UOB
zB3B7Q=k&-oOXbWq8~xrJosxfT6+Nz_bMm-<{MJ>iSt}Jn<j3SbD+8`0ujx8_g%Wx6
zS50n!C4$K6+ea)q;!JRbRRf<NJ-ChhZdK3d0w-5uBkv9@Y}Bp8#^1JJK&tWgsNis6
z3e+8}Ij9{YyVLb4V2*_C9QZjY{`>bYEKrvUt$STM`U*oMan9&A7Fy(78brYMBY|CH
z>u+=8I-7``6tt%P_emvJ{qQ&7k5v^$zVnSsHWC83e&dNg`c4$8Qv$hO2zPwp_b7H;
zm`R3XE^8=$>EFJA>2L1`Nj-4bFmoJ)lirsi)_4`_7NSZ@J-I>^N9Uro`<Epgu$umD
zgrsP3QSp`5Ha6FgbH7D{TlQ*8s=?s*W7xU$*WKm(eQ7AIm$0W!rYDZ)(fWEGx*{iE
z`SV`VL-ztN1I|vd-&Z5@=W06tifod-uwCUwfD(yg9tNYO_6SeIajuOpSq^Tr5f7*O
zfB$V68NB=gnk6bff6%^#15x2>AgkwI0AhwniL_rc<ml4qMD&iX$itLj>aR<~$3?jr
z0htkbPM47*8G3$z#5Duw(C;r)ko{|w89X~Wb66ZtQKv+KIR{mcb22FpnZ%Hr7_N60
ze}o!hKafo!U+e$t*gq@O;KjclD=I1}*)(FRv<d+bD%|ldXIQ*)v(&|-#}>~2UpHnA
zdEW4NB#+;sqo;>5Bu>VJx`xK$Ee-gs>wT+bl2S0yhJ(iMj-09#?w=)v`_}{C0licL
zLPDt2!ok=nAoB$Q027i?R9+@~Nnj2`-61R|-=dg2x)%y}|6J+azs}YfuJjxv4S_)E
zt$O<VeEHyfL*ZwmXCI1`mVf(mDb_z<E&b=K6S3&nrF3<xM-VxFoK<AqP<euf(%$(F
zw>LTX_bKE3IWFMOaq-A;VEc1(bI-{@yGG*L`-f!6^-?80{H%?$oS&O3>fo^F?=p0>
zZd|Jw|5|-H+(-8hMJK|AIwAfkBO_>WF}-S5H}IyoJRFaD!NsL8ySV5J-7n>}{@+*Z
zCGqEqEq`Be<<CwO0oh|yQ*|glSIu^PRboB^$5!&;wmgK|C7^v;inr)~KPa+4=YICD
zb65CUSSq-|t&hU%Mx$u~TMSj=tMv3B1p&8R%-Hzr7;+x|+8e*R<Y86w!H6^Ic{KXw
z+_2a0#cBKJ(JTGg6QS6yw-n3DgxcW)&yuqGpZe=gey_q=1{oqTRn>u1Cz0QGVkHC@
zS%}2>MSp@UYhOq$Tdy8x4@ELqo!V9HH5hpJerDck13*+LS8s0^!ctFV*_>&=v9SU9
z$PLEf*x#oj@aN*@{<^r3jK40fuA{4qd;Zxl5>UP;B+PQbIG;qG?im$O%7EJDi{8@W
z;^JONHlpl<exF%;qvz4KgEaQ_(Z|ESPJ!pl3bv~qP_dv5?GMB2z3n!BJtD-LIEj23
zsPg+h{;G%@Gfzbb_6j<3A7Gb8S}rLaJ*j1izBeX_<GyO*@#k`j{#>rc+Ek0*d*&c-
z`?V?jNZ==u1q1|~LF^FmYgmE+!=mBIC@EonW;~ZrQsN*}VS99uax;2&kDfqWCdps>
zwQ>UTk?=QAUJ!-yp7##k6moJ?*>K;$ydY1}#2L!#5bKaWVmaFLx8mR8mWdxND`NUT
z_fG8iEv;`CSk=fN719|l%_hW5X(5|fD;>-t@+qL@K}a|>B!qN%7Zw(v^L}(FdrzZh
z_V35)aqF)Y`UuX5&jb{)eUK`hg~f`u%Rq&Ti<ONHe;f>MLWMsDq?l;UC#Cs7Z!)k)
zkjz2>Pcik)(T=n9Gr7upbdg%=Z~uzLyI{jGAZQBsK;$w%;jGcHuWJn-$Js_6tW?Tz
zoOzI~$1f5305Aumr%!#Rrl#(tbo%oCewyI{dUr#9+m2?%qbCmD*B#rn^5a*~kAON#
z6>S-O4$7dUwY3!<qF;BnVl5fY?<)*z@O<&xflU4Or6^R0G~BN5??M@XX5x{hb^97z
z5U`Dzke$fR3>$N1e%?PYu+_-iJgB@}Lo5RI`=cluJsG@?7Dag4Z~Kdq;s)zp8X@B1
z+#Jcv_Wk>J`Uoj;C|819kSP7z=dNt<k#B4xq!>D8t)QbI0a-eXA{2*aKV&8nN=jkJ
zq_KW~xI%;H>TgfbeEH8chG4tG@&EpMgLC@IzyA(?cKr-X{y+Twe?rRtxh?-;S^VEk
zK;#lmRO(4yJ}<AP2C7y`@(&+U`H0e=_ff*&|KnUZrTL=+tzOb0TVxAg6t>8@bL$fP
z(TY@B4<SB~@`Wlp=+z_H-~IcaU;X2FcH_(EeV|56NcdK&oTmcn=r0`{AW@azyruOJ
zB1NiDsPH4(Gq~|a?LUszl3{|besFNdRW?lm#1jq;QA5q)%yB8lGPnp)FcXQTrGiiv
zCOQ7^2fN;6i@5Hmmwg>jG&-2W0}8BTL<v}QZ$jXVKmUAnkD&=N&3}8jzEXJjkOI1?
zqUPqZU{ponLW#BZ=LoK#>X;*>>b`l9oI%{|-(I(>BpI6M;k%%=4GoIN1X^n6AE5kU
z*7}1rk-xnY`GKziK15z4=HV$VwFmD|WRmjo^kCwklc8`_?fu&UWVQP{lW*@`PRPjt
z3Q+DVlrr3Nz4uU<2R@y=%7;h);gGvf#D^P>lznD%8C)x8kdsONbnic$OM}?cr#CKK
ze?lfErs9Z|m}3J9sSlF4F#o(SRPRF>knr&Y`!%qsgx{MK<P~{je}}05dd6BHpF1UH
zUj*NK4^r;x%OQ>7A{A=?eB%gvbF3y!qu#@duG-*%G*mA_AK|&S$DM!uw4;AlUVc)T
zNq_$ILb+?tlS?RoLZ3WJdH(*!kbCB|T36xRyuGioNQ>W4PDV1UzrWahf*Z5pf3KY&
zAcT{vc&wq3{?GKE{p9*K79RLnKt1Te_{D2T=<xTKlpC@nkq?T47@Na<SWxWmZ-Ad%
znLhU56U1ZDJvn{(JZul9|L`&KusYA5POFIfp?vn18!!-ITHe3ER&Te_-hx!`dE>{b
zfB!!eYQjB6#1&Gf24+`LdSn|M`^S4$L1cmpZeK;*8|CA-us~E_{-3APaH-5CE)y2l
z$<&V@A04I8fBPW1p!GwyZ^@9PuG7Um`S1RJ^$eXh$={AW`eEne7C!Md|E<$;Z*Z`R
zQU6$Bw}fX8j-M>YlRI{G;<oGKe}2G3$gqgq$Q<hbOYgdj=__hu|N1@0rMJgK%aehc
znD`BSe(%{=HLrAj^h%y5ac6n9|1}5~OCU@1cBb}iU4l7X(%Rr&IYI|U-zNmb?DTm0
zWXW062P2m<3VUMiM39dN2I=BO7^m%N%#|xrR_y=F4SD8@y7ezV{`u!8tYavwKR^8M
zzvHk^q5k>2QLYqpsDJJd6zc!<!+-X`ii=C;HtpxC3v#*sf$M3h+QF}{5;f44EmzEN
z>QQ%q3AvX-zp^~ZWXBU+9)UWkhOvX@z#NkP{_E@0*@r5q|Ha;$ht;_D?c)m@dmA@N
zl*$}MiDnIKDN}_sPZXtAgJx8#HrtRUQ$-^c%`KJY$<Tl%X`WR`tp;gswOYUP%JaUz
z_u={e_x|}h4#z>Pd)@bSU)N_m&-1g-;7)LG{2vs?&71*l9st~YFuQpN)AJ^j{Qsb`
znlKseY7E4U?5Kn9AG@{KmRM082dOTt|MNoR&yM@uc2cy5NBgoMomjO=216P#$;k(i
z`{d*#rpzrDJ@@YZ1KG(@M6$I(m?X4%XwY3D_=J1MH7-af4Qn-KWmq+D1x0*Iw(}sL
zG$ut|9O?w-ifKIZHCSI;Gbi1uSrLrIIJtom{^3mu3I$DFQ{!v{KoFmKPsN<5FJ_G^
ze7urioRyUY#DiH;db2eLp2rK%1KsV4lz!({M>T+ZzTUjqKx6islsyRE^W}lm(C0N`
z=bxD-8H3_`OGTn_b0n?F+)NR@OaCuO7m`bb<s!inu7YGG=o^^p8CcTSXpfok4~Nj!
zFImX%s{MHqQliF@J`(!<RQC5$dc?D5yDIkD9BR4n+OgEC*)-Uy^S-*OubvIBx*6bv
ztOdy>d^yTDmhncQ(+3WlNpTs(gf35aD})!0^i-$%CYC$?d|qo{Xy()%2Nzj;onuXS
z1hqct1l=%i(fCdg5x>EFrm%I^xnr_ucxnVG_{VWA<&h|hvB~LAk9Xk3bDLQ{uTm<d
z*?fpP9OC-j2uTtDZxP8&kYw1M-s%+0$*pH-$OlEt<O>}U7eNC9^(~mB1Dw9*jVT8^
z?Q1dQa-1pX^nU-s;w^#ttCn($y~(Z=&gokx*)~yK5G-MJ_o7vuk-J;Dei6jEIp-}{
z7kVOmS4Zr{?oekTUiXnI<)RhJ>-Y?^E!V}KihJc2C~Uw@&y$c&${U-S==2g1Y;h(V
z7b}|6RNtOzHVC?<cc5X=8X%O9^yM?HORW?}Yt+F3H}YGqFdd^hIx|wO=Jk5n-p#rh
z)&?E4$;sia$2a(V$p|uJFXt@jKEJNvmhIT1sUw4E*njr-w0*mUt7vPm<w^4iBSmZx
zRfs{#&x~apHTnKYtLuS@ZxRR9yd`tUuEV{+;mw8{nGH4O*q3(#1G%uZJvaGHs~-y*
zv1@Ux53PD`&Qbn0!o2!vRgN=#jnubF+ny&}B|viX;cibq`P;ZQt>ZdRar=yu`Lz!B
znlLJz_u+|PBue@hULNH1-TTpl1#QbfauUF_N%FtWKB!m|uO;Ht+@C?PI3@O#ay&Qq
zbO9qm=fE0NV$)nbCBOW~6(cmSo#{6{IgAJtC;3RF1^V)xQTJ5658pHNwMuWyR!!jf
z>99T$UP1Z&*@CRzI3bh5oAHr2j6$*{ml=s%-Jz1(fZKn{8S>cGKQa2!u&GW)nsw{D
z`DQ+M@7?2Qw#u*qxxKn7$zbo&!@G<NH9+~=X$zEB$(b9x+<OOe)h)Bl{Sr2u5u$~}
z$FEwZT+XxW<Ja>onYK!-Aga<qna~Ou>zWv9=Q|-0zc1y%^l!<M4X3ZJk?6a-M#kYn
zXpi#Y!-rvH6!!E20CSTy)|^r2QZV@?xX5k1HSeztp_eXQvK?>jT6utrYWJ%R@;STe
zbbrkTk$`m#67qZLCaz8<;}e$pe&IChKECkKdQtKZ5eM41)1nsg=PJ<HOqOP&tJ_o`
zx1ZeDg->6;)HMZtDVr3AUtgI4c6+&78FwtI8bdYeYKmT~%f%xD9C|)%NjB8fT+Qz;
zyCv+>mqzrd%(`%(>l3)0zQ1*U8?#d<Wiu@E#z}Y0ld+f|zA)0LAWy4N8prmI?PveM
z`iEiDUHoisz;V5&bj(<4iDUT&IZn2fa?S^#53D)y0Gn)fZ%#4jM$});HuX2kTx#I5
zOQK9VPqCSnqwm8T8Qv2rkvG4@-VB-OiM}M*Dd}VUrDJDTYP?KIUx9U|(r;j2(ljjd
zC%<SkWgvb>a^XML-<Idn;yUb8D-#I&rIDR3lr-U@WcBv$7T}$^vch#t#4Q_k31@%(
z%O_@wN|2ap0>5oxcxO!Hg2GGPOM$53SxJtfY3-vKmOB^T*P9q{k0ugKlCn%M!U>r8
zhnLP-*vB8K+<sih4ehWVy8;4`#l?4zHJ`q^G{Sk%Fs+IC?yoCHj~t13blUcsJ5SWf
zSkfTe(<`2A{nNJf$d1WhO`&?F$mtdbmZY(^f2H4AJ!-Ks9KTy<q$PXR%INnPO&E)7
z((cC8%B(~mnXgiA{4WT^P~m>uH-bNbw`c;W+pTI<raP3R0~1VK#`@Og^nKXVcCo8m
zSEoJFPkuG*so^@>#N#SJBPYh1bwr)|LXo@mJ$+gSS?wI4#5e8fg%Tg;6s^&-OujS%
zXpBU&Wp#pmU*5Q3Rf0|`;3$u;*FA#!la_wSe+8wULZGf6?@#**Bz9R02<#<GB{wgu
z;=Ax-ri$L)##u2*yonI~*sZts1WJHU<v<<TsqIqq*IH^ISeEr)@wV!cAw;9M&f)#v
zqO@s_(lF-!s|&QUK|rnWbn0(9SEDd<@d(UOE2nQL(bXQeD!h58s(?MXyZ6BL5Uz!M
z7Z3T2(-?^vxBAnYB^a*6A<9mCJOBseeRE>_$jJ2YjY6nP+@F}X%AYjFH1qlixHAif
zUr*W{%D&Ty&py3K7ajf<AS63e+SRNSZ8{oR#bM8AX#(o-RYEg?$QAP_m-J_}-$}Nb
znVvt?VqZxN8UNma%mdhYU(eUXoamI@r0jdsz_~T?NcTO}K>By_iU*>blzemRe2#^}
zAHABWbeBKeGB#AA-U(!c=gphAo;>0NX>JM22gyb#T!QzpUCBFB=>YY(OsMLN>JFU<
z>9iOO_NvNvV|q`K#hgFii=zaH^hr({+d9wj7`{DmZSz(&njHC!Z<7Fu^faK{4?Q0{
ztXN?dcBwdp@&X*7Vh|1EKct1&y?g69#{<;G{r<%QlQYc0u4=XD;xEBA>H2x74w9Yn
zrm~V=)wY~Zb{oT0%W!f$6Ttg`cywxuppC*^9j)ev-no!%%l?JDt0I*Q^h|y|+VSLQ
z=VF5=otkK`H05jCoxO91*AxdswV{lE=7OS_`G?K6da#k}+(ty9=3wSuF${cZF+cm_
zDT3IqdbIzlcYk@1xEFRy(Wkd``uj^yPsTPlRP$9umTVn@o=7nwmIvbhP#w*io*#A?
zXpttH7<xXU)Ve-M?<irq&FdrO!AG8eAUQxzNDM?;T!+gghkBybBcr0u`qMkQ8MjrV
zy8wOi?x`*?-061g$;m2k1HVFb7g9i5P0NEgfif~*wQAMH$ET`Y2J^VgLLF6G>`GNU
zn<ZPHmk27DzP`THq*}#A5o+k*3rpqCTvj@UiSSBwn9>s5U=g3VQBqQ}jm8XpAZZg8
z{3sxdetjuVaWM~jq=MR#dBSz5C~#=9+bAKxSzS@l(9qDKC&hNvsvW+NDNS$c!u-IG
zg;T(U2WcyOf1{w(RqT^WWBV%16k^D`pP<}8LvmNAk7S#7&Or7a(U?@&`sDF8m!jdy
zg5!+wianLG_g4G^B-5J>3riH((oWa96Rii;V^3LTeGc$!Mu$G%`&)t0xXZ^E3d)SS
z#69W#*;KkW<wb4QKu}F=b#Ya6C7%LIPI{Q}K+L?;BG~;yl&7fumwLnWpKRK*1ss&$
z6B=bc6~UqzoU3-bq~F}&pnImUuTv&DS6x+Fnvu>(%6WXG1Hm$4#1Qf2ez?Yu83C7j
z&216Lu7tqCxBVK6C>W(}G&UIO+_wGt5@`{M#<TalS&J4gCc_$U-PuG>ypSKCl)Zbb
z&4ung<uS)S$-xa_qW78C!k*YI2hkQ-Ilf&`@YZ(q84fM|p>YzI#kJ5OH&EhO?{h0L
zqm7h?m6ij#GMxD};%FDn9gbsk*yY`IMg^^QOqEa>@dZoPXm{9>7!Y7ICroe>-4qfB
z@EG5vPgQHgd$YmOzI7AB-DsGwZWquz2rQ6~mvDB}2XS6Z<hAWfcK1~cl{r_2@)ZyY
zQzLYfiEk@})-A{q4if80gMLRa*=5D)AVbnqy83d5Rf($<;ER6#T&xX;dX3D;^aBO=
z{bE*4o42aEikcK)`-zY+^GNv14<AxsPU~;pJm2)(98~#jBm&qySF!ZnJ7Y*1+V;jq
z7xgu!?(uad(c27@O=}!P#NkQJ`4ZGodd;9Bc-&-qz?rF;B?$zO0hCbVU%Ba~S#S>K
z4u7#rJ0+Obmsvooh>zbIMu+Jq8HL+e50@2ATFdMWUS{-XPJb7QUsW?scbDTx)XUIK
zlCb*}Lrg^k2?AcuKhTv?(4X2zWH^dc_x7Lcw{N$~Xy00Abg`qTaLQ=rd*Gr1ca1;T
z%*N<&RUe$e-NFUaHlEE3m&#<Q{zg%K@a<HH+nCPU(Y&$VoRj-6*7mdHnIm2p;<JUu
zw#hu>@T4RMKCJWRre&2eW{W==7%-9!BLrFj$zR`_+GFh+oO2tneX)fHN?9~u`KD(3
z68~f4zTiGaS^rEa*zI`m%@7T#GZkv~PMPO46X}VVFI<&wW%r``)wRW4z>&v}g+La`
zl$0A0riUh5AsvXT(<j~tG}=?wy50Md=aKlRE3-@WrnG(j(H1(AEzifN8?U^grDF>f
ze(TUW_s<uWE-@GgsBeP0D}@(b4*YN`60K*iL`hWILSsHi=!T#L2lP{JF67G;8OZDk
zw{3NlESzFwlr|Ko1mAkSo!#xO>Iam}2F4gP9i(6xiilO6W({hUbou$I>Dx4?bMi+c
zjJL%_i#7FFPhYXH=Rp*L<Ym^DFBPl}kmTV8pe&tBh0}HNbD-x-*Meo5dM8TO?ODHI
zsf>WAw(!OXxMeI~5(Iuk3fG#2tc51qp<MTSVXP>#Z{6+a)$w7xs#;xl0*y6AyewkK
zKSYfS-yq#}aUWgsJa$B9W^&p+7J+$fuNn+YyhBJ_pSpqgs4H>I2)Yyf$DZO_k{L;P
zT@TH+7LvViPi=+@scf@Wch+e0xqtGko}VabKvZwsl9_y>U?y&|{Te3QpRIvpXbFk}
zs$b3TCA1gd+$X*tx0#+0=mgH}&=S=?<oSpcO^Lmyj>_#u?tVgBdyNl|q+wEi&r>;z
zgz*(CSX2F>+H3@<LM)n+V#}rO%*^2m+qC?FrV;zo?eDHrW@LUTt!eL#dQQ<caeU)-
zFfS<KyEzx)wyF*Ey1;sbC@I!F@~(x8Dw%%n(|b@My*-qQP+PF#I3F<jG~`SL&q)H6
zX=|dTV`OJ<-}N-u+MCBZGwA~iF{3fn?AU{Eib`+Zix4v+YTeQxxbRx&g;zrW1<s4(
zz3W)Qo1wL4X8b6+!Cu3a{44dWvks;)(<<dzkWw*95DV$6Z%Vh~Kxnbmsqsm)vkK?g
z#UBJkj3%>gEH4m*k8Mf7JwREFwMK60dc&peP_3y<gKP)S8+=pkf^uev2BFHis@XDi
zRK~HD+B+#T-jdq&_rd|X)2>d039HrQMirl1Hm2xyNi>{hX>iYEfVgt@pCw9)P!}qx
zotg3BcI;miUINyV#!Kk|ZGnN<s6Ss}K+D&<M5@n-d}s8>%FRFuDk_mvmRv5OR|2*K
zKdK#$rmf;T5e%z^w??Xk%V}P$u<UT(V@B(bT>L){E%_r=YL3SXZt7d#^13%!@o_fo
zavThVnaEb`u65^O^RY$ln@)!3jWtCd=|WP^?LP5(MXih}K*=TrtTBTvZfoVI;~HR(
zlD<u#9#aUy;N8r`Gq0}`_NUhN^ZkJ!&y*E<Jh3FD8DgDlnWv*q+A<O)wW!B1)U7Ls
zdYyh@8)-L-npm%xt3AK*uQ<dDX(xvvt3BA@+&)vAZw>p9@qwC+JRpvj;tUEWeNTPv
z(=fV;@7h1-Eu6_}8hjECcXYXS*_^(5n?a4$1a<sk4pX2m+<oR+;S?mN?u;_W;p&sV
zU6LJd8Aiti_o?is(u=9eww<M(qZsWGqjZ^nMe@v4|4PO^0X5&7H<2yN6#M3FlArk4
zdU3e?ElJ6WGHu!3&h2hOh(&xbz{E8Kn<_1PAV>o4T-5yJ7j8|l-*)Luv_~Bl5xBne
z=V~x@_3Vm&F<n|uR@{xbbR`2)N=dcD7OmN%cKc6Z`H=^6fs+w?p=GjrxlWIXO?u<g
z<a$H5RBI8`c94F;C)q~;p>d@x-46f@nMnDI-ySWxI*kC^1hjW>I-cw2W$)L4zlpoR
zgy}Wut*JB~XyFIw$W<rrM5I!!Oa;;ly))+<?ru2>jzJNpVGbM=oLDHA>U<gJfpx9f
zjz?Q09D8g0gP2GIG&3Rox&thamDjFaE3F;={$2BJHZ2x8+NbVHKL;6umk(4+=R2rA
z{2opcyOeOFw#tJ0s?mY)%Hwb8ZYcPi(ACZE69_gMP}kMvhRkrOua1HEkSqRF1gC$Z
zhdFD#9qHsfUiKBz)k>#o-+}MnQfG7-)8_J^ChIwR<;oTRd^*<-ZS5z_y!70u-gwVZ
z7_o%+uC@Jcii(Kq?y)6;CRM<nKRElkeD@CAp2)Mra5ECyR>%%}lTr_<%INAiTajo?
z@Q*pGF!kx*e^CpjbSVkRGG7uO+G|z8Xa;JBOWGKQp2s}TOH24^Do9=ON-ap@;=R`X
zC`tvUeeIxwAdu)eGGEHT-EE8#Pa=)$%L`0(q;#;q)z##-sLJ$+c%IRW4yWn1xQ(;j
z2S{=9+slRLLfIWR_&pJN=~=VEQ51J-IK#9^Ji}(W^Up>Ln&4nWhuB$=bhFd~w$~Sj
zz8IB6-NY_ZzamDVGaZ;(0s-eiZegU!KwQ+~GT2%banQ?~#UpO9N||pm8j%Hiv~AKK
z@=e7J$<B&`{vol`@XU$dT96mHIrP?u+UlX>xL7!I+ty<jEp!s06llw4jVs1$CTjL@
zN2{`SU`_uyS80uBN;VlJ>6frAd){){^+2~o@1mou$&t|}W7?RmXT6r!ZEEE0npx~M
zP^8aabzdB<-PDQl^bRHq#^OywcL~3{cdK(H-}>xk>jIx(>+EDzIU{H`=yWp0I-@TX
zp^PmLXmeog)M)cwtfrvoeTQJHbl<UlNfIE$JGo<SITPc9ZA?&u6}|MGQOg(Zpa#T5
z33h&}yjDDe33ag<$)@yj*M&CEUQRi7hJHulv$YP9Mc!Y-8X4m-)<eNMD0xDw+qN&q
zhAqgS17AzbREg1yogJnN>xpL%G<~<<*G``|O`FL}p(u2?|NEAqJhMJzKId7nMS$*}
z?xcufA0C0a0+y3zVz?gm3`x*Ruc3-Z-k|8|7vZVC%yJ})9VUFFuz+fEq1Ef_2CKCU
z#9ehJj0)A}n4?az&YjKF@HFAZ%Y$#x8Dst-ur7Q}5a$X}i<-3A%b`D3h-wo*duH6e
zR<|U%WZAI<5rb^8sZmCOKB;4#Idf*6Z6SXb>|;`$Evh$H3a7@~D}9g(@8nWly#i^7
zB&-Xw(7AofjjOCtdi2Ha>2QQY4b~6=|N8!=sQHId&ojmf3IZGg`MIx3q~XX?E5K`+
z7qFP^brX|}okke-3Jh`m75BF0tyW$)RPy=CUg&5nS$9#tEXaRa_}yyVOo>>}?s!DB
z$?&i%$K8>xbpi`+C_F8)u`{bX%x~T@DJcL%b{Btw!ufoz5TiuLFR&~K&bFgk6Hcf*
zUC2Lt%)(h(Y0TQ(OR0s<hK>d9=l~e@P{;8;H`nQ<Tj~f5B;LJy7rIPpQU$Ap#EcwW
z!k@D%$JHEPv1!r+b$T`x+z+y{>kNX?23T`%>$!X;bEHvjYNT-!L+aNzI`Aju_v6aq
z=ijeSo`JAK%~Vz%!gVNRsjticH=_m*uiBZ8FSoqrcL^oo&2?s#VH~J}9jdd%rrTE+
z)}J#t7{GEV-I;Ny#S9g6l#VhJhL`hR-VYFr<|STqB#tI1F#8HNDkvy0GVLpQpX<Lk
za}Wi%2%XeVe?}h_&LU!SD>MA@qOWlohGZs^@~k7PP7Jc;${1Sb;;Df8lqM-V+t!>=
zRzl4%r2<HK6T#f4{*C7&eO59^%<cO9t$+@_<KxQ%T8EcorH$V|8cwk;=udawOmgfT
z&34SIbnQ>q3x5NRq6X)l4^J@Ca=uRGAnbxq2|s^$rWH!^T8t@hwD&{A$|ljF^6p#~
z07lf$%yHIuyFi`2y*;B$E?`6jwFGmYk^F;RaSJz)*XXAZwh}>a%(uM|5oAGMqM-I`
zHdW8@0OcC{r<U1^?1M-qzUV$MB&P`WzVI@0j0Y=k;5xL0(;BgCJqIJ$GUe?e{#0eZ
zPsx&PQrRDpQ9t1##hBts>}`Ye%IiE%ht|2&8#rr8IioxxJ6cn%VTh9UmK$pgE`8SE
z^ewFn=SOY8$=^2_#jnkE1#Fr%s`t9rOxlq(KG-85{Q}27!_dr7gw*(<=H(vO8Bc#&
zvNNM4`(*d+e#0#61i^Kv5)780z^9qLke)BIebJ)TX02g6&kE~FwKYW`L`h6<60|Kq
z<#7WtZz0)=S}ngrOO`+nj0R;i4fD{97CUNLc)@A^ksUn`u3huOTGl^4@I5C#At9ln
z#RPG{+Zb_+8pI~y{dvPj3AFC@GUkE4^kzQ1?Rmy**794t&V583)Ur-g&uTO{VNPbe
zNvq?2jsLi~(WGRWU~_9zkfg4geSHeHj*YRlDszn2Vl<avCDDVp#)MY(-sHA8jd)IZ
zYb0763^fJTu_q>wIQUC;^3y+y#*q@K7_+b+;~Zw-u=g&LpLld+96Fv}FgyZd4%q4b
zzHC(LJfWAZnQfHrkz!sgAAgdrz;du4eU-@kw_97|-CBL+oKA;a`m#2jl`qSlUL5Zr
zQuELB^d#Y1C$;dOA7z;3X_;0`Km9ON{nU*Q0e;7k(AW33s|&V-p&o!uO1fU&_C~?A
zHN&-eF5ibG-~s&kB4c8<eIFi<bY#@6ZBB169=?c$5)ADcDhby<CwFvFg?{cu+q43A
z9?SQ%CzVg2-0nHr+1V*$??=k@L6SE4`iaP=#6K`2B5pCCoql-*0=`B{FV4a>l0rA$
zi|2vma+_`YjM$g$mhd>~_$1^cO-R2Ote@jvFl{iw|C4h_a6xl5Ay!6Zr|zciBuuz4
zoAo~$@!e^-_>u8Rl$GO09-vfrG$GL6|J*-+CdR-=Z>=jpjB^A+P8~NiWQfBL(iYjK
zt^Z^woF<cYglUyrwAynN38kj_G+Kom45+l&rZJn6yOhYn)Xv=7xjtp9e?UO-QpuJz
z=>I7r_qKWRr5EMDBdtPM)BF#Nhr2&3_z$QD{#9*pL`BYs$NIs#v8hHgjm6v{d&h5B
zgtF=FiRk;X1Q|N;WJ-w<W)jSC`sk7Hqd87i91PBDowd*5Fua>SJUL2@8u!o3A>Gbv
z?X8Gsyin@iY#qNt(McmINBE(bxiRUHDdizK`Ss|_#F5<@r!=_3TPpW+Z*WckrV<5u
zj>4DL_g;bp)XY{pbEZR3&J-4FCF9`1cwtxM%w=lEGNDN)Uwm|D>!m$P!03T3b%DY=
z<3CKKq{Q{t!_yT`CFp1@HZ5EI5qc4NB4I{g;rWngiL`Ft-QNy(>KMP{Pn#~Ey#jS;
zU7UI{B*e3C&55*q&(k)9#AjRdPU<4bUpdZ1{adq_?`wl?q+o9MQOzOe$jz|T0rBS+
z8~EIum>w2Mab<HSj%1x(e4hoGB0aN#<fy^vTeQKrX6E$tbV4&?8T1pu^D@L%Qd0=!
zhIut8PDeOiP+VtFKfUg2;Hrs?Y1%9HPdn(e0RRKq_T|F9qlQN7ye^CDJgH6^pX$8X
zn8q))2a$T=W%MjT5PE^h*DZ_6UFvk$93^~vcSXwEwE0zK47NFbKUw*3*uYp$M8w&j
z_rDI$XA6WsC~7>};DMe^%m-2V$xqdvT!fFlucwcGO+M^DruXbL%{b4h*-3-DJ;}iC
zeLEc7vx;0ps3%@UeeFs@b2m~Ju*Ks0C)(WtT`MKcPo`1co0iut*7OUyoDUa)>g_OZ
zMwJo|O5d(0dTepR!n7+_@5_|oTrK?e_s3KO=s1qJ6NJcxnea*p?=P*p^eKGhYr{<&
z5m?sZXl^kWzjEau&Sdyi8x&t($?2w@u7ZG{peO|yS7)!bv%x8y-yePZ8S|y>ObQM6
z9M`Z9C{7B7Jey{JNth=;{q6NO5jDdW5DmpeL!t$j;i1mGbSjvR)uIp3R>EA96<RyG
zU@3RP1%8?pvLw$@%%jwlal$!D{2&TM@q;y69|Q(!J#i$3U=5jydZWr?2{?h>f<A+o
z*J|trKgcM{*#h5=q}G4b%n^;;gj>(v@X7xfe;8*C4KkBXTCh#Nj=yg;)^>ddk_MwL
zIX%#qm3Hd=X{1<)!dM8B*T901%vXaf_GEZ<s<jKi7>-@;6*Ggu)70T^k(fJeY=?wT
zw@afu@;9S+twL-_Z9_IA?(n^>#UvH2`SrAAN0HO^ys@ats;_0@`$T&D*=%c*ZlyBe
zB+NV8roGMvRiD0;QsK4DXsxU<3$fMJcWzx;8)Ofq_gi?LE!M#@qp31(v5OZiia=hv
zc9i4-ZI`-R7nPuI?$#;dE-e}<e|bb@2!WS!q1qX}!+AZeIa*~8L?d5K#&c8F45`0A
zeez~Ac?alTZ)aqZ0tY%=g1lX+m3QgqGOSzU#Ax?aBn~IIPjo1w7V!Fp5eFjU+@?XO
z9js2&pr-@7PPlbwkK1Hj27&mwbt}oCwK^sST638430o1@z^?9<Ku6D;MKY@+uY0lK
zpIg-KF3q7?_>5c5OizDp$*Q(X3keA!-D&jGx8@JF<4GFKqj@<B+@r&1*qu`hn}j-P
zlJHkW9llp+MQDs91>qRiYEFOaUU_!$Kl-(Kem5t2<9n*$JiRZY_Z~NvaVjH8hn*A~
z>sWtIVIj-0_xVstyII9_Q|Zqzt-1{WB-A;K3VczHzA>zIIZSnVw=&Cf($T^SnTbxF
z6*<lX0-zB_MMQa%nzS~|k(p`hT-(EtbslIbocj2(TSI1yKp{v=ugeVeRm1d3Sh<xY
zVHZ1xINcAa$4Y&=eKkJU*Yc&+yoG!mv8To=zdt(@sCae3(l`fiHTg-gNxs1v(exHO
zuSF%G#LHzn_213x$E%GUa|C$J7iO$>MqN`gy)LhL(V|5w83(SPa;<bmO_U*i_A~sj
zIFi0X)-tKn>_zRID^?(HJy}B!e>j|X_U&E3eZ<>RXQK``ly74`h6b{j&S>!~v1bb6
zzYj6TTKAyLU6as^NxfQT19StYo`>3)XX4~DI#a79u!WtcQ9xU==7K|!`%%Z<2jU(h
zI6bk+j`fcBwyHq3KW7iJS=C=d`DH87SmETB6P3(n*;^}4-trk7tIVqU>Y3$eZGbG|
z7WDGB+3F#B?j)r|xUN`-FaQoD2l8F?3G~92iE7)LdjbW9(expdi|%W;Tc)a*AQuIO
zf!UwoRW8viX4{NJ_*q{&>Q0wB<q6z~#u}@TVM}+1@B&>E_gyB8Hq}^o89`MS(jFf)
zQ$*O0Ri7Atdb47P**>WC*@Oh@1nX32g)I2eHOMWD3$0{8qgv<nVja1BB)f%|3urFN
zaDgel@!P(pCiT`OGPv!Nu+3XR5%*+*A5i>gfA?8A(&s`Y-B+ar)hWre52+*$Wn^p*
zM!@hdyCP{^SgXUFJc`_NC8TYwjMp0%s%=0()TV>Q&l_(ON}lOUWydAAwYv<u>0I3i
zrI)gV!EjP7YL}Hk(`IFc!sMrW;_1J(=Sf$fE=ECAL4sFiQ=N;Ot$#@Z99DzF8*luy
zpdtxY|JJ-G%j8CGLnW)bi-16`E|b}X)&MUGBgqgRDu%irmq^}-tG?T4dn6(<&n^U+
zNJ|&@PLJlHOJWRo0y=Qnj0&ld_Xl?Ox-kdVlA^7s_xYLWS)f@djU+i|m&$TW+bJRq
zKe2W+o<8F;Jy|&~F3lHJ$I@(Hbj#7}V+#=}vdo^RJm^)F6fx*(q+O%cPdm5xIo6m8
z9cuX?aVk2z2!GLWH_>^$5;?>&k%!z)%~tF~3H8_}z<|V}U)g?E|Medn#meIYt&F~)
z0AUqcv9DC;xAToDMcnpQ7M+t*+bI&#6q^?wkpy$Ir<eEuDAm|kL7cYG7Det8i6abj
zG;e<YUiMELuTw+*U5r@cv_>G-PH+L<kWQ0WutZ8mqUn5O1JXQWTnemXr6M9hF<~|F
zq*ORZmXT8+VVO6o`A22>2b3@~P^^bc%TULSw;itm+JaO9Q;UQQZ_3LJG-2;TJ5g`G
z1rZJbUm<kn(93&TTn7b&fBSVju(p2g>BQYRQZg;Og^XPdp#-Z_){<~Wu_X7VDLc?P
zdl&DJimgMC?kb-)oi(C4nH3@=BNVm!lt!R<=USuTqey|a1b7gm{z;V7x1#Uv=98I=
ze98#4|3B7_Vuz7Ud38Z352nI6-uL%ESmMib5Z#Z|iqS$2jsT_`vJCW8I85kyQ>J~v
zX!ejs5;4^%c4mPbg${w~QjLT|h_na}EX20B=Pm!2sZo>Ea*1;8Rhk;;J1T>>Zxpcj
z{FDwUN5jGtqZc#F_Ij#P@3mAyTj6BvC;g8kCxOYmTu}3jlpsj65KnY38E`uh7@V*P
zY*dmvi6K{eMb*|S3lbMfZbRrv%8f*22X#)Um_#&C>2AG!G6*QMkw136T*#KR)r0Bt
z%6A+0M%zN!+}s?FNf2E`|1}r6S73Syy|5-Wy!J=|N!lwy1|v`iEv?1qmFWDli$9_&
zuM6or1p@IZlW~T_!I)>cNc=YW_Hlo$3>{T`c@*?hDq6G<ywAF&DetuyOf`<h;;)q5
zvtcMdQHyR!nuNBPpLY-=;Yc|%Z;<9R*4V8C;G<9CuZXduD0OKD8LaaOd%zRCjJ;Jt
zj^)+h@bP&#O_jY-f_Fwm?6UCy_llYE)V+i2xJYFS3lQ(nhIXCoKvs8~_|xT>=ckTH
zU=w2uiB6#nE%lsbPQL`_b+$_Al#cfrTNS0e6h28H9Ejs?xY*?rxR|X6N1s-QF1K@G
zOP0bZ7ZyGDyM_O_N_6#5Mu9;9Yq<xe(*r^FwJK8C0rJzYK4xNy-R0<-yC))(;xD+M
zh)M8tYwLIEz1Os2_NAJ0TH7G@#B1B8i}F!4{V1X`<W}Oa(+?AxQPD8z@{#l<Kv2@L
z6#obM*$H*wUAXy8kpb9p1c9?<kX0q>I&o8jCQo2s6>{UbGLA-D=D(jA8E}76?4kfn
z(HhBtfg{}&rKRy=(}PHyy|s)&Pj&rg$Vb8k6b0|B+5Kr+W93|J)FnxE&lagr(g`^@
zP*jX>6k+S;yt0QR*7^lYChR-Y;guujUV?JX4=lh$w?c`gO9k#Ox@m(4FnS6EJRvy9
zp6Kf8a%YeKZNY1T9$(k1#Uh3sE>D30v(D+~C*@PV7rNg+-Q(y4@F{656B&21YEm}}
zsLr8F1rm}F&ZDoTd*=7k=a9+F>M&lpQk2$07g)()4zihoxh8`?j}M4wpWBexRidy$
znOB@pS3<L+Njy+Eg{vA0<?)O6HeDQRbWf~FHUl_>Ko}E$g(W7zWj|YR2^uJ*R_N>8
zcFFnLRWEd7UN_hj%<BxXUyyi54s(ON;55X@k1hP%VB<O;U0vpbWIlmO!c|hl(ij*7
z_JezqvY}o-<pqFtQZo}A0Q@!+WG;hd-#zmu46d!dL)Dh5m=lqOZm77W`0^{vcxHaQ
z;w7kWf0uM!I&QE<t#fUkFQf<XqMAE|d(t#-NA|Zy_Tu?tArnVJ^^fj<*(t-Lnz<3@
zn;SnRXsTM;Ai=w$Nb6?OSr|yo(?a-6+hG{8_Ak=kRTR{iWZy-%@)QKz{up{I5T0=1
z&ySGhCKzEKjF!x-XgvyVSQTF{ympk|eOeS_@eHYX{9@-XkUpzLy9;6iK+qy1;2E@}
zoE(#WIjyq`d3}<UW6)&WfZjicbDOmAY9zWHGw3*>zxpRX`lRce8u&XOm@Fv9=F;o2
z4G`X`*I|$DFn@fmP5QTNY_UazulfRQITlVuTg<K{7RZrEXSnO*)#XtCl-*7u?;dFt
zJkRuypK>uCBxL{tDBFurdF=Xdl)ZX|!Zlu&?wO9xBYxtSN6InxZSZStyc)n*2MLM|
z(t68FG_;obkuujve~z;^KU+~z5iNJCYf~(2OyllQm!fYS^@_BaX~3P4rvTk^VWhuV
z1ZE_?PC>2lN;4klnXa$ai3XE{(0H{0B;<9(qxDR=QGyy%bC)4e*uyuKYWV_RD#Hto
zguV19by?taGYRAgc;PMb1&1rEdjqWU{PRrEz0K}R5i+hfaOWZ4b?tHZ3WfPMmZ9o{
zcp_XV*Nir!RC6EAkg^z3D<(B9|6+)Fy9|{m@Nwq3uq7~_LCd^g(?-%kLm|Nl$TDe^
z!kNWXx{6_s<5`BgW4>Df0HXo~^SQeh4V0&KE(&m%RT(w~@F7|z2y}GDh0p;cb&I1S
zD&F#LPJXss1979j0-Fy?qieLYeu1_m(7Ku&bt~a-J(CP_lz_7)AoDv%J{LYW4=-U3
zx*vb?A}4J>e4h!)D10QEcJ<cN`PH9J3y>2<gk_JE6Aac@=+>e;wEbjk$OO#h5Twrm
zd{5OnpN~F{F!K3;6Yd}Xz9ASo3={ym3*%)m?GDvDYZo20fTOfbF8Y!TumE~d0YFZ!
zYNzcLBG>0M<Pwj@fSuV`Pl?BB&HVZE$#&9un^zHcnZLelxE8nFVC+>MiEb^b2qM_D
zt4O#G1H1>>NAFo1q;k2eF&^+1a`ah0+DU^suLi%8=f!hHg2#+g{d!^`hh2<HExHK#
z`X+7WnEG@?jG8{3@fb$n@>rii_vLnAFB*U)iG+*26Ij0s4JBUkw#q^#RYLV7|1Agt
zQ$oU~O<%>s@jhjr_KiO%{{+ETl~$n%=sgAGGY_(xzv^sv>WcXRjO~pxcg}Jz%mIPP
zeb9eY!2^6VfdH=^B{+>^VbfDGjrT|pK;pVc8eT>*`U=@~WBE^i4#19U;oBUwjx44;
z`hvm2_Y0@ck^7S%kbrU$GihF}XSo8|%pv0mqZ23Yd{a2>L+V?}z)yHj-QLihm?|ed
zn7e;%8X6^;qjk-7y>0b1**}%xDZSitJSfMnLIpk`p?R#u-VbDr+KWTb@WGqEB@lLT
zhoMWqKSt~_BQRCK(<CYXa^};yRLr94%<Q;cwU)GH3t#;0ZrD8q@p-n0M9Z@SN+^jH
z$b9G-(QRf1>HoBzSkQZ@DmU9%c{r-$w2RNNcnRW)ak$%5;)pCi0(WxQ#8+u|dGop`
z_hoi1E3GA@$iV`mvWLU1GF4Z}H%<)sDS_Q#H;P5~tyW`)r=^dlrTvtfcx0Ql<z@v@
z7~AG}JX;3DU78s{=n({$ebE&r{A>N7^NHifA3c1*Edbb|;pLvm^K}W0cBIf+jB)9i
zsv{q-am|qCjb73i8bgIx3jlO4C-%Ep{TwVkN&>o`k#v7GWncMTW}m&u`$sQ_SmU+K
z1GxY?Vtwlx9P8T`vFFukgK;5x;p5QSzimSII^ROZO-nRlla}9#D;aouYj&OfXtDfd
ze0f{_mtWu4tq=%#1yJWD1S3$1|Ks>V2juR{q&|)l&ryXD;sjj_I5pZko@lE~%rLV=
z5tlsJeeQ@ik8{TD&8HL5=Gf@3D}OIHA;B_K-x)>Ks&N;qk$mBwee<Ivz%Y}xzK}UW
zS)cG4Ak}|A8W1Td$Ewag^w0kSIfq_>{}txb{}!$43~zvHwD`~aA55&<ef-)P<fu*g
zc{~aF^+CiBjV(`T{*CfVhNbMW>hv%FA?9$3`{~xLlt1gvoI7{Y<CkxEwDs-G-;TjB
zAJOdJx7Gei5{udY-xoL<7-0U(DpP9KH!3`{CQJRyL1yP4M5*K7e_0&DY>}vHa~}`K
z2l$>6|NE<`|KT!}hYH}dX_s(vF-`vc0_1NNSIYSJ;YD|S=y|Sq`j>y#F2|6QO`)pP
z-x9j86_D&i5%HLR|MiUf?bMu&_~#YCfvm(BFYaHKgA%_VH;cCD`QK3Ko;ZBw%;T;9
zei8ibg~j@=g%b}cM3V*Ws)(p4P*Q*Xb(#}e<i41i>O<N17iImo#a>)o=YM_dguhbU
zJd6-z?jY({RT1<5(>=Y2IJg)@0qSqhyn%6-CZwpdhaW5b{FRg!N3>I-b|G*So2%`M
z+dF^=2dKIazw%qP=M)tkJfWSby~$(AT*}{y!2kGuIQjPFFPA*d3-#UPi^<;<){_T5
zap{r_`ip<e`DLSc2nz1pi9>x5wC1`c>jB1J9}gKrAb4+ec5W>H<-#6|pdpX>X<i#c
zSI;awt7Wv<<JSGa=*UMOqZPIRY>=?wmydiCIvTJ_=}d>Q4@J=b!`w%LixzX0U}?mD
zT~^u|EafY<hhQnnBvx4x6b*2iBQOsO9y)sMFIP@T#r827>b!!?CTPwn9q<O@u$#!m
zQSfOY<=7f}`#$wwKB#Smnt&4U4P?tKIBtct<UEPZwRrV?6f?6(Aq8cP>Q%pduugZ&
zmLhD^%@fPDx8qa(<WpE`V*ZfM+u09C&{zw&f2Q0~UU1VB62xW{#s>DP-kO@>pI`>;
zy;X8znd-jZ{$9UA@wa5xWTDlko{bysx?*ro+t{-3NFhB>v4}5u^Y5O;HxEtd-sCR2
zRY-b?8&2jPkjiATI@Dfex%lVgb&XBB%DTRBGj%c@O9j=O{_s-eEzVMt$?u<WT;dLR
zq&=mqKQ4d`Z_=1@E*Y>vLNHIzaXM?(t?1;Gioe}CH2v*oL<)s+-V&dQeD0uuH7b7R
zA8-8m-CgZ8izgB8`$E+zf5t@fKIA-cGUYF`Ulxh-f*tsN{;xl#9A~fkk9=0K<NwjB
zf7mx?-+#Eup?UKuzghsw`lbJO@&8+vU-rxYbGM{8&bcj|sGD{R+Sp34cccw<Cp45p
zTDlRc4H&j~bRk(za}6-`kS1fR@77G(;R!{d!tb9;yO@Ioe&<R9dLCW=p(@3_xbgVZ
ztoWQqv7-Ea+N{*fqvYF5=lJZ`Eb*OxE_+VQa%t)EO)wL>85KS)E&2k+xW0!YsgogZ
zEOKt=EJ7PRGV1I#)!6y7;x*5N?=G$Vp$_&e>F)B{ANpYAr*nEDaICx0DI^S1a<x!$
zw_<;wmr7ay+RxA5sfbxHdzJV1-(0u&p==~3{{3;#5BVS!Ps`t9L>5uzIzrf35fowq
zBSMWjz%B%Vc<o*Z>I|s{JlgOXJpsTNGo}U+`z<OlNVCu&qM={_2BQ~Vdx`o(pop=t
z@pvm97oTAWPU4TVB1QP=pYLzuWY+1TD}w^0?{>8cxDaI+Uqz`6#84*aAsM@?+Bto`
zHckV)qQwx%uyHu`<_7-F<EgU5DYseKqet8CF4y=Wa&_L~?16nU+bF-+=z_1aYE=UN
zPQCO)+?v3aqeQJ*h7VFy{@TBP|2qLGH#Y10wjI+l0m24BcUT)|6~K1?ZMjXnkx=Mw
zZ~t^4c2+6S<JfwhxxHR<J@zFMxF--GrD?1Q#jOISv$qi!!689(yf90`?3B@udpov?
zXG-M9WjsF}U~l<xZ67Qv70W9A0Yom;6A7U!-mV|uS76^`u9B;H-|qdVe7s%6>(X$(
zH?T+fhyNvHb-U+ZLRRZj-`@D4O7-R4CtOeu7px5ktlx@Uh<f(ixkT&Xvn0Y<e~&ft
zj|w)BE2xl2)9!Aar2SAxV{hTXF2R3!s3O1l$DL_CJ$GPVD>c3Ca#mo^f=7Z7I`vC3
zC=Gvvp`PB@{ZN7NTt=Mo?vtqGDk`FutE8xiS+~zYr^iT&#!q1lKQ6UR4bt4R|1;S2
z(5$@G*`#Cdu6s;9#-@BSJ-w{z$<b~*EAZxg&}r>iNA9$X6K@^YeNL^nb_7Y>FhMs>
z5NEG$b6eyO>9QZMWS{B1*`0$czQGkEam83rbOQJ8R|k@njZ&2CLlPvOUW$N<&<RlC
zx`S%!iWT6%Sg%yG{Gm{HN_AGs>vrQ0L8*uF+szK_W1WQKf&ygl*QPW^Z-E!ekYFBF
ziQ;k;P8^vNS@*<I>PC)LYEpFTGvgEU$5}ZQKC4be-U|7zyS3CyacgjL`vkG`yq8Kk
zTv>phKY9uP#66;tz#0dP%m+`GWIy;rlkd3w>@M~w+dBI)-sr19+w#MKIs4W>St{{$
zC0^lYr(NXYF=67V_faV(TZhr&^5YoQ`2KtYSep^J%|jou?7Pt#s_iX6!6JS()Uh~U
ze(cG)Qq3y-lcQ<lkNrUXp_upI>p?ZBz!gqV{@f-2i-hg2#WuiV!hFcgKFW0>qyFsK
zh0%7XE`X?B|26Q3oaM8zvj@n1VqcMH@^)5Tt>y2BMCMcewp+BQ&WJVm>eVZ|y|eR&
zYL4NQ<FKP=R^Im{`NxZ?`Ip+^f4^o&Q7pvKIr~nh0V1J@HpILBL*xsdIn|YEqq4q&
zcdyg==cR(P>lUN;(=swnO8gcTKG);La-OS-8)Y26KCoLzcBV%Yx=@0FX(;83uJkPC
zDt|Zo>UzWeeIe_!aY~lHuA@w__x{cc;G}6h+v)D?3Jjo?51BR`1Tkve4#-frs!{*-
z2+L<r{r|sH9XIgI<-QKvfkV^X9oTG3?*EZ>;=`<jhecwmXMKUk)DN|^H<myCT2|YT
zy5Z3oSTV&Mr+(STWKTZ|1IIIQ#u-&A!r}5U{nzdt{UJyB-!Cs-6r1@qUfxYmCz56|
zIA(QJN6pIn&Xpf~`uN8#?frSvnv`GnxQ_F5HZvsT3nJ=ZJ2PS+JhCCvpF7n)dycAe
zUj`oj@nZRYT4^7=C+>i`9=AJCxIQ_sjXdM=acq-!=XOy|_bmOFKIs4ZV{m&rGa|{y
z_OWz_w>SQe56S=hT|58lyFk!UAJ{zmUF^CtQ|{NhXN@oA!%zD;UKBpzHO}{LZFFjg
z`&K3&io!I86U5*AFk}|BaW4b@b)$wqf9H05XBeLEB{p5wRD0NavcKQ&sw+FsZP)hW
zrH%a1^gAmt>sa@Fv3O(o`}vEDD1R-WRz+M>CEs|SLf}m7*4t}+ewa1ZPv?ajFH=l*
zK4rsIaZ~{X$Y;bnh|6VLzwuW3vG%l|?+wP{$GxSb+MgUC29<JKo@y$#RNCgpt^9~R
zD7$}%V6V3qKl@+b^7+$Q`iwKmdCSP#K6Fn!^?~@FAcr4THtLs6@)nyU8k^+%g7s%+
zPx1Tr+`A)x*g>%!|Gx2sCzqU^kl4qy?+ZGNA7)ecr3oAUOI!E#4+r$$i*>hhpD8j2
za_>L=`oBp3|CZ&aErGv!{4eE&i1hz;aZYIvj=RwB-cdhBL=wiD2OrtT+yMghfoRuf
zxY5tO>16)K$otowsG-*F$LID%`oCS<2&tNtglC$SUT^5K(^sbVyby5`Dt`q_ToMIn
z3FQLTThXB>qGw+H#;fS_<|J;v_sCaxqM!)$wOk7DpFcLNOc<t`0|MxiS|PIswN`_H
z0%bm1+dbl1X!8@OLY8AJ`Yl6+9Dd5MVh%VfQt}JW-`_2_iP_vf6EM=|+;}cfijlA<
zk(dCnKR5*B*Me;;=-kJ%VklZc?y-H0s1D>dj~g^*Q{J2+08ub3P(i=&THBqaioAa#
zka=fZS)*EDZv>M&Co%j9O6_~}H&7)`C4_kZ{P#ncB?pyS!?G~eAjoQe?Eo`mXDKqH
zPIL@zo_Rgy-PhN*ZToi5KqHzo*5m8e92I`K%crJ$wF+)&Ch9_-&Ya+pNXNNwdUBXy
z$%i(>0q-@UvaxQT-rO@mYbT#PgJ7skA`y6sAMO#>Nr_S&O9hI8jh=UQ)EGuLZKg4s
zz1%#a47Tzet=B}FV%%(XqwwR)s~{-K6Lf@qH;r5U=`l|XvO2g>r#m<bF0mK@>-#nG
zs8OR!p;wv)Eceb>kLGv&LYT}eA6J_jEKXgmz-+9%+e9Q`2n9%!-I_+NkBX+(rvaEF
z0SxD+jS={Y(Y8S&*P(+*&=PC&%hi~%Nzcz$Z3H*{&v^@$+yv`ZiBKBBofCDRnSQXR
z`!!K<F)q5r>95*_ex%pKJ?%FE4Xm|7bn1&1lkD~7`~zMKDGC0!#x~WT0-??ROIhsD
zb3Jgs!JGp<7g=Qy+S*^P#+Z}`OZtJvAq7NTDNu&?1fPf=wB~a5YyN>-RC=DKvb6jS
z8R>ympm^fS7Ft9;dbGYN!zR3Drh0fe0ym<i5H%z}GZDFMyUxP^+IjTj(29%wV2c*o
zRb7>w6wA+OLU^OmReSz2=ctxdAf2r$ErEEQa#(Tysfd{vYbDLv{6YX#_y`|*sYJv2
zMT=yTDjs%Mur`}w1XeD9b5vFv;{&o{6M$!inyB=mfBx_*1}#m~dIG>8E|J`Cf8`Dp
zALIFxayqm+wt5OuSUF0Nz>1{SFC|Syq9#!&5MJg3oSYQU2L0ThWqVo_;*XLbXlMGG
zRV?PXALsxF55K*IN!Ib8<<pLZ%jc<%C)U?IK5zp((#L@8v}%sCNe2Dw!hYmK-9um@
z7h-$rbPxAK5c;f{maE?AmHCT}0scwT4Y#m2bjEul(3;Do2kh)pBF!od{eAZU4XK^)
zn&mS$&9KC@GAy)49;ZZVsPJCh!*TGXKLZcF^>9CWbgo&lPa}qZ!>C^kOlQc{9LCez
zL$%`R2g}HmvN&OuRHXy^DMoXV2B=STvfbx*=zpp)w(QYsZdd+sOm%qouD;*1;LS1C
z)Tkb75b@`^LKpd|uaRB<aH!t&ksL5E*XCb=;UKFCf5Wyb$qysuwa-vaqHbpkTR>25
zMjcLRpjftDG%*DbAbE&bF2;9sW(+{zT5-6ajp;iC24P{xQgHa1G=zTp)-(}J1p_bc
zdBvCEuaO+aH+Y>6S@4TnI2;R;ZRDCmc@)5XK%#op@MCDm6b0y6>vUI#ic>W~9vPs@
zg`#gOkC~+JqQ(I862x3ZuKYDo22Xj9))#xsnMY=?k+*e9sseOZE?^N4%6@xsRi;d)
zJ?dEaj2{8yl%^3@5-#lT@R}KHQ{fGBtYFUF9b&I4JN4B>Jj^*<-mR0LeTX)p2o?@R
z$J`72Kt{TZ<UGre*?}>rz6X{`Z{D~uf1-2P?wV5XYnW(meBZe4U^A+_IDtaOATSOA
z(OS}wTtKg#-;LA`vPoKn*kD>o=Zy{yhrqxA0@ZH|T!p4o8+66)q-^`1X<J`{nencZ
zlsCVpJf1pHMf;?-bZv^2k4-@SKz4fxMqumoND*_rWS!KTMTR$)?d^LH<h<n*W(2)p
z26N~||1!h5Op`eO{>4QoL7ZGh^tsT;{-~?w@}*4j<my@>um}cPC3Ow@IxwTp7d&Yp
z^W5#~PYZ2Jc*6r|6AU9Zx1QyR$-zc64gUmE-NGkY&Zdovb6K#ItuaPk_J{|yO$?0}
zqEvmi2@UBcXdMOjMk!d_y~8?%auykl>nk_jvIm^nljo8~2#zA0Eh`E*f!?{QJMauU
z@tO)Q8*rgA!mYrbTt5F#4AKH$u`FsX31QJrd{n#qIfW9ZhH@56lNZ|0JD^#x62>~w
z4ko?31X??sAa)yQtd3V5pJ{9&=g_uRL+c>Uc6^Jn0bo%?F$u`M?j*<k`2Yu&03~4z
z52&KEUamG5N)*?ClUdC8^fHlH7aUe%ny~$$tH*00+n<(a3L0F#7qJUrmwS6K2B^6=
z;Xy3`up9+bwRAz=?!OoEd4qELLg}Hdd0Xx!_?(i%{fv{E`PHg>i=eC~8p~31pHc^c
z@1erm17m*8)<<b;UJx_z!lRrj&fcyb=A$C1lD`mp+nNmB-MDch1Y%Zqm9(o5x+M=4
zE6A>rY%MS+@B(1b>n`gGX(f?f^~BdmKL{e&LOf^Kr*r&7z+B3yEgaMt%64B~hdH<Z
z7{iiZ9B*|t?rWd|Ri_fS1KjdE{{EcAs4?jLT&ZRS`~o0GDUE0#iby8+8*?JM(6OE+
z&*wfpba5bSJ6g%74;m+mL8cVgsda$B9n-fh8tjB^z11Ba&JEPt^AkI}Aw9QpA+N*n
z=`WI87zWwG3w+4<M7fRd$egFoYBlvh`yM1xjzX<TrsvK9Poq~z&fJ`N3u+j<pJY#n
zZ-iIPu(})m^02@Y8n-4AQb9Le2^z;7ibruQM2SQ}gO&p3trI8Kw_y65-8-+vyho!U
ziG}Zy9nLu71%4{=PDxo`f<P2z28~R8Sf$+^KZtRhN3)ZqH+BL%k@UUzi@0O&sf?n@
zID6k4{3v7*t(XY)XjR)+e+U#N=nNJ`9ad99aVX8O9WeOJnJL>L(Bz7tJEMPY2(ywK
z;iNGlRHzfARBzz(qSg)KI3Au98-^N`fQ+MV`;CQ^s59>4HQWWJkYampYhIV<GQLLA
zT0d><U~q)vXI-9>Zn67QnH5x=M4{ZFbX2MCgohi&_pDyEDvG=#r~!r3g=e%LHdW+2
zg<mlF_#)0mTcQ7Xb+2n1>b~ypc-p9uNxNg4OwU4mSvc#{T{u(s5)1(RlgIMe{xm*8
z(liJ0)T9#<I=(=Cx&ZZ=S>@V|mI@hUbPG=0t{(|E<{~>cY@0*z(WTL7vLo-W4pq8W
zAiBD)5kJxHS272b7hB*ol!so-TTW`Ubv-oD3PL->*&!>I%YNHu3BW{cld=^mr+_v1
z4$<B7R)ZI4zj>v2!Imr>R9LpIuF-ln=j$7T>WQ813KcF`m7BnTYGIIk7bHV6(k`<h
zQl;eIMYPA7p1(cHG^@t#H&~{YcV1asK|~UFK?241d|U3MuG%<)nnb&hj@RSKch*O?
zx{VtgwrZy_tpH1EtPLZDVy*7dw3(>^gSaF_i06UJfR)^ZvBxhT$T3-%fEmd%J$qOv
zrx*{ExF{;E;6<*3qS!}Wl}G~ag%nB=R5Dg6^Ex`*8=!;JzSF7Iu|8_-<<*5H&{HzG
z7E!lM=IbL8BHr(>l#@)W+R;5+DIjtb73QwE_@uE7NgIH@fKHH~xXgZ18+4x;4mT#^
zhM<(ymD;7j<-fWldC;oqlxxR+kli|ohQqzd=@G>PPrn8KPTA)MY+&slr@m%&KizEb
zNx!}1>_ev=1{{PFaZNH(>nx77ALbORVC=Dmik+MJqJ-hvz}_!6h|CvY{4w@*7=NXc
zOpcxqeR>b>|9n}vLcuFr4o^i$_Ep#QZVf^;{UQ)@P{H%{?WvBA)-I{=CiAq-*TUTQ
zl7PeYG-Y2N2sGLu&TW&md<Cd)BA`>|4KyVvyF_b28^Jn%s@1yi>f^nPS-h?=vFZ0;
zEBUTl3u0p8keIS>!i3Z~5QNlItjnM7C~H!ia{%P4naoX1N$JdI4)}m(nq4)bY_&T@
z!s<I=v{C)z$-#u|HgqHfOc1N{l&2j5@4^}}Tp19HUUvOCeJMv#=^{LNs}PEZk{MLJ
z`~<>7v^$c|JDxQ&E3wX5>a%u_q3`1Z&R#G^mZ6LrD>hv(!EwmaWX9lapN8bo-s?-_
zXVO-Ixo-|?-zQzp5|j~cS!J|J7`hH!lLF+aGp*h*zSbeme(539p&^|XGXWq_`{{5E
zjK1#68N3Mqj6o+hryuY&H5M`?<i&Bf@TrG1&VxN>zDpOZHT(4D4ykt4$eWfuu#kK9
zcQMJafZ9u|N^HJvJ6c;W_H{6F2O5?!NB+WoYy@JpOqYwTR}EFtm6Zw#X{uq5<~<X3
z0Th$!IM*p}w9X52+A~Je^$GIv-56|`_}faT&l<*DXn>PEWj1_57O73IFN?|@d~9z(
zQWEF~#X4r8I`Q>kcJH?DKFgSv8N9j4_a-<?QDX|z9m1j2zo9TL47^ZL)W!&EHiByG
zkx_m!*cAj$W5Q$N9s_==i0tL4F}bmZO`oS0QjP~gbWJ;w6?!64waR?yBj>@k?ak0Y
zB&xEY-$y~F;v~oi`$;?^V-Mt|hEzhtD-VrEL`v%Epn4U-hquPGu_6ATmpG*R{QL^?
zZbK^zAPZ|d)e|jwD?dg>31pLuiTZ*W4S}p9h07b?5xbA6%!eX%l#9LB-m3|KTPt9;
zu0e$VsHzb}v@Y<nvNem?bu}<069w#GJ_OM^(Nm9s*dy%dy0_0s4&^7Wo43Q1oTdUc
z>tUMUOvY0rOAn-mDwE+v>L=2W9QYui)1<Z_+Jjh|HA$lYA(OqntTj!OPLy2Z<*ZGl
zmtA$(+Z~d6uZcj5u}sy{Dledyw8ErVzwKjzUkY0Jk9MPpqEd(Gcr}<eI%&l_g@oeA
zIHZZX*~PDq7dq~`os2rTiPz2rPu8WQ*G_Ur6XM{J5!~;p`Er)(7)qO33k8^yNr?~%
zgFsEl)=3@Y)=Qxyju$!9RZ;>~6o#ezqWdTuv~J&-=C0Cp*SzFItz*?eu7lXZ?@T_C
zC=XN#PBqyf#drGB7<2^UqM}fsBQ4YkS<4m@8P_x(q%(pLWIV61flTPAydP5PA{>Tb
zy9VNBKmv;YmPVp9pfxe|+@%Xqq$jR?N;hf~h6t)iwmz_HNUQf%k)DAl(HF1ZDK$Ak
zEtDMmSH`mi@9|RZ_qz;8?*MH7qBozL1^F!tUZYIukaW#MunEY~R$s=bGKoZKBe7}(
zb=XMA_-(&Y{&0@~LdK@^Z7#%jlfXu92B7)gbJ8>x!$@Q5;}wTkbEN<X-GBddm~)24
zI^{@zOAa;w;TvF?9*)UR^rXvdBxjq<W*12FTO+y=tc7!%=2FDCNu&vJ6uFh2y{&)g
zwX#wH+bq1ly^<&-wrv}$jQfB}1)}N#C76I~U1dR|v|}MsqSiQ;7yFV+x{yjHJXZi$
z?*_CARfIxq09@@v`WolNrt4=xGzmwFyx9osMDgAmd#K<3d;^B_E;J#zi!O&?BcuM{
zzJy!sSutJi+lzTniGFs*rRn@_TN2RSpL~r9LQt~X$yO`d1FWaD#hwCT55C*0cK^$S
z97`8Q$p@MgkKPF+f^yY&5r@ba#SWr-K#C%S!k!L(lGI?XQAsh6jeZ9e)|`p^<?VzC
zdEdCNxDgVyC)3@b?vgxQ!FG!qCK*Xhtol9SMTrCReba^z4i&!m`)cR2*UNlRf+*@N
z^6E;;82~Am_53hxb!ni8A7Ud2o^2wrwvS?jj_k}t7ZK-_3H6)nfvU@VlBfXW?wCen
zA?h|~2W{P6?fWF2dQatK`=`sen<ApRGBt=(E*0i#XZ+#fyoJkB>~y;8br6udBoxd{
z9qxB$Ht$JBO<gG?H&V&R7xBH8j4F6bU6KV^yJFowzw?I)F*_yg7poqfG&BBIfF1F{
z%YD;ELYO7OSNEFma<~g-Mlbp2I{}_Tl)VK5&0$iIXb;|P;_yts&N8!1Z!}GQy{uX5
za#uN`K~B=~F7o0Eq_S)2G@TA=QfB8Z5PzH1m+b|Us}mdrclFiB``ZiLf$f$A*O+D3
zkEL-S1D~6~;!a`#=YMM$rv1nf&8d@fDWj(Jyz50+eeKT|fuAJ0fj!T}FlJ->_)atl
zO)#)n<_!);e8Kc*I_ANbY)vym91XV$nJ=1hTC^i}UQ|oi!Rgx~5?f)O{<>Bg^bR_%
z>LR5i{upoDD?irG_E^C1YC3xsYy@S0<`Qtz>@X<W3rARigtNDZ|3!r18S2y|3fOEV
zQ33syMhY0mg2c9yid5$f#xOjOS)8j#MynI`U4#&-UK*}A#QynXxWti0TD6KKFz^OC
zNjqU!NbRgM!iz>FC+n8}85~IeuzDd>?NDHnz`#hQV-Q-DXN^=t1xRlRuZ$SU?_OW;
zUkl|5&Vf`goex0u)il1D+m4;E8++mWwfX6UvJKXvJCrlI4!_2^F@E*WADpZIz?QI0
z?hfNrIMoO1uL}vH1~$A^AsBjGU6b9>MKCEaPKp?c+V$=Aax(op{Z&0#NR;c=AaFU5
z#ys;iDW@)`UCED+7rRx5;g}pToE>cWeHcXpd5GV5d~Ic#`G*awqWl4%b0OGsV1YS-
zO7L#@E7bzg=Ez{XLL0(To<DaN7jX&j7r-|aiP!5le+_UX8_S~Rt6&N7aq6^jvx<<l
z2(4}$F=B#UPH-JOtu{@DE>CFt)C~=1LttYps87f18_KA^2(?@{bQ`V3C1Mt^-0nYt
zkLN@a?)+VdLIy3mfw5XJ(Y{29XuEj>HU<xr+D<`0L|ydko7)$0oQ+|mj!K8Z;a5Nu
zBD`Y3?g~^>AEe0Ddj1nn&lf}x{CCtCz{oW^L*A#FzrzmhF_HJXd)HsowzKd7GXK2t
z1AnhXQTfWNS9EAv_AJd`2XKn~67EnEXB+{P<C1MV@~A)|lF0PN(~A*Ou0Y1Qvwo(!
zAi08mlr~vvubys1oBZr!cL}wtTEUXFyH4+WH`fERV8G(}#9clJb=)MokewOpLQ*In
z3GKdXQseBb*4Gj_l#SzuUqRq(>&!&S4Rv`@S@;`5QVle4x|G$gb&yL+0o5MP)lm2$
z26@w+^Q%$Y5&ry*2t6g`erH9EA-YkhkYSYBSz(_M!Hz;iA)k-_L8%EQY6iO9N$x{l
zMqd*a96#X;{i+1}b>Ro{a(bQypIlAxzDWW@i&K<usAI)m*y{|1Dap8THw3p&Eg=+N
zCDr%rz`a}lA6M@I&t?C<4{J~vMUoJjvPx*#NhpbACCa7}*)xPhSqY(RWh6U9S;@$j
zy-D^cd-EJu_wWBa|KIa{-S_=^-S@Zj`CQlgeU9Te&g0xR1UDd0nvww?=VhaCo+`BN
z%;=WSL^zl{aGR67&YuB1^SkKkgkt}k%EwzYC&Em12-{eVRb+73Ec_rI1!D9pky(BJ
zm0M@fwf%Zyl;Rs8$H+iK1KjqxfW?r~@?9vg;{wkQ04>gMDHTDkDfm41^BP2w`^D6H
z_gFUylGL+@*^ea#?Kg}75afLz{n1VBNR-9g|9&k>YqY@gsJ5>X#cN<AF1{aJal|43
zW{~xYCDk}N0Ry9C&Qt$c^36#JG(B-e0s7po{MAM$a*OwfPE&#+=Sk7UcEiY0pj)i7
z!*%k4a`u3=h`yWH&dX==dHPw~BUF8Iv6$H-f*7&p;D$acTGI=}fLc=l07^pBJ%Pl0
zwS*YD667Gc)nL~hnT_CD4_ihd#fVlP&k>Xd4|BS+2~$c{qXNS){}pjtLS;_?0E341
zWekSjIpV`~wq26Kc#dl2_!lD5fI#@vaPkjQRgzWy4*)m;=Bul~iknC5gUaUKs;EU5
zv8E0REp}-V(+dZWN>R!S^xSozGWz>JSSbx825iG^x_(y~Dy7#<x73KPQu?8uNv#|u
zW&xj3b#leYIi4D%bwiA25}N#^82j05O`3@3_<_PW0Qt7C0Ai}4_3zAi#EM~=7nt%d
z2h5<;@==YLN@?z-`a?J#WA;+2(8-a&kue_9Nubk8<5_q$z8mYS<u<)1(b{Y<p!zb(
z7iJc;^o(4eFvOe7xs_}FFBtP8u8>O<Wf9wd@T{RKV<voc!{^O_Y`_rn3FIf3qU`w?
z0!Y=3o|~A#CAbFv$X-#vnO?-IgYozBt)$SR!O}Y}{Rf+vU!B;d@Wy;<tE!k;ywgg7
zbmao%9c)?3bKUA`QKsQz19IUle&TM~o}in`F{Y^^CTV9(w{PEN^tTvXq|zO%RK|Ra
zg>G$_0CdPJa{C8|ho$i~bxWwel)93-V~d9KjX}lNE$);3ew}leNhe(U4)PQVA0=cu
zed9m<3i(0JIDQ5GLV(O2cH2nqT_Q|t0bY9n@FfB$e*B&R9NyGmJ4^|mMu?&%CfbQI
zEq_uy&Oxj|kWXM$O`XW$Cf#|ZM0%SPO;R&RQy}mM!axvZ<qLebGHj?gz=gXxem|an
zbppWtPoIx8G+e5$-yIZF?sq{2^B}x8PT9usKHeWJY)%l<p2Um-oCuD=OCnrwxr@mt
z;+2f!Z)vdz547|?Fhz4iTPSziyd5u@EsJjd{+7;dA_<xp29@zXXlITZSc1c2aXjaK
zZsCsI2XFO%BD!AA;q%(xp8mVk_}m-|nq==E*Puvyt3-18h|bbqM?!i!CX4E>@@+lg
zL9jIWh$m$(YjsNKNMbTPiwEZ~pRKv@(@r=G^O9c=TrkzbP=)}3*k_siRu2}izH^?B
ztbDjxG15*CFb`2xt7uBhY^-JmywGlPx6~Y0VnWE)uiW8$`SRM@u;Y;vCxlSEsEp@t
z;NNcUM$5JMGovOo1w{mL<~TgMQT@W(v-5IYgvhIB;Rq%3H}PqI;T{kUZf7fOQsNlY
z^!J=1+zAn<BM66dnc-ZNbHt1zTz!2#$5U1vE5qyo^LgXvGL}B7#3iD`-&Q|Gi2<nq
z@?1zPI)O;t?#FPm<2gCu>35uq{BRx`Uy9sh*h^qh2a(h`$^nvjsnU}?{CKYG^!zr;
zB#S+ASASFjzG5OE8(Fij0kqJg$=lWZgr%ce|Ctl=8`r#Hdr&!ex8SjzH_KVUj3Zq7
zqVzPp_H!c-=tzVIyc@Yj+-!8#mZmu<NUSkmhNed4(W1&)lSSQipN;kNUT`hc{pqye
z>?f4sgYz1FyOBv$*ve(*IqeBzobBfR0!Bg0)=#OC^Wm{plO1O<%0;9~A9spE9~5cv
zcl}fW|HV3QZZyQpNB$%CfOF^qZ1XuMeRWYJQaK+F*Fh5hh()8SaBIm5wb(FGo;Ovk
z5kvcdlg@y9);&|)h#Uhu3z>&`qZAyo$>?$`s;anDyV4IkvFdZ6TjV6VQvl^*iv4LY
z*Zy$3bkpe!0tpZ^-CqsTC*B<-oScHVNNiD&lzGzpI6+6iJc{w6nxkKVji)xGY8Jj*
zz~@n3dILuL0RPa;0bU(K#m9DM0;U`L3Fj#!EO_K;gv{h?+I0UJKplL0eNjI0&~z*Y
z&tf%f)sbBAey_V%wSZS6@K>UCA*bNmPfrhHV=)?n&B-#!c0%p<>Qn-FR28ft*dssG
zM(n1sDP*DrRVQyh3GE|+F8P6@JU1GXOW+@WoNOe~R-I1Vql#xCFDk%+Y3D9R_f~*5
zW+hbTzrQ@ZNefJrqkI{h4bpB|`O@@266I{UU*QRBa9!rcDDS+8Nm0xUvcQnS2@|Ca
zgDdub`%bowJ*(DS`}O+*P}+ZEis9kmGqW(Px{D^~bD;c_QN(<3TleRUxNhfwqM<2y
z7UcY*61O2>W@{Jr%3&%{0y`IaI3gd+56obyw!~&(LCC~U+hI!0Bn&D|(UpbuKQ_id
zjR|d5(1Iik=YQdmaJCX3E?HE;wrI<a@AIvG*X+9q{*!1YMnCajA;bm1r>{Ed1ji?2
zB0pv#jh54?uARbheLWNBN(hR<MqsvdMbVpibu~*=`%~PXf@_XPjKMK_0~h%-*nu*4
zabN0Y%5D0hmNG1-*{iDQX!R3jp1qGPG@RErUmJZHeEl{cBJV4x=Ot()ZGXyvQy>_^
zax4i5X)1?U66S-f<pj<%K$}M-GozGTL0A+i^*6Q?qmjf~0T3x^KLf}JN}eEXf6kzz
zPc1*}aq#A-IouAenzg7IN&#jKcy<zc0EC|BW(2T-z=tV;<`w?L@kwpvLQ-Ho&$&{+
z5*vZ8{5<D~S%hgcWtXrp=m!T+REl5kcT9`2qhrl$Gp{P<h|eLYQ9zdiz(st}muZS$
zgfO~^sM(0p5%)6m6YK4pHwh;|Pepl=lf+6^ef_M?LKB33Y+|BHN1m1@KA5iqI9q1a
ztkYxh!hYaDE4}=j7czU44Gvo6vufT64Ou689t>5gjhYdl;>}ajYqNFbS5NqOdwLQz
zA+QFv!SkE5Vw<!mkF6eNHLE18PL|IP`J6W>``ce)^q4!m5^X3mnn50n_&dZ`za$J6
zKt5r=jvqlCe(0{V@^@@ekv#t_UhtW(C$VwkW+y8A+ryo2%F+rxCW5Djm%$XqQ%}BX
zi9}%um$`PVzZot=AH+;UgXZuisDxnifqWFpaP%&?U!%zA-~>8FsFV<+h}b_2oV!ch
zB;fO=AccaGSS|nddsw{csrvq0z6=GHdeZ#Eq9<E8X3KE4OZIFCJ|tiW_}IPsdUZ3t
zFdwXRlBuAiWUsQ36FT``9T+oTdyqP!GY9}$5W>D!PJg+D4*ef3fTH61&^D5$7SzYY
zMuq#%Hj$1CiJwTckg#;zsLow^u(?>cd1rh*XhksM!-(xL_8vXQi{JpQ=*=P`C<k!j
zoofxcjC6o&V3RBeScLABgQF%ZK~w0W>Pf-uk&v~l;DX3ZMJ$Z;8OGPrjqcnr3h*^*
z`x$yw|JU@ge6x+gs+VTiL0IA1SFRahxEXpG`R@e%ON_Gvx+pu_dW>FBXd<nItLFRI
zuiNo?pKFuYVC6i0;U7i_5dNV3i1sv^P*njRSO8qm-_qgf3Ha{(hu%skf(7)8b5XsQ
zf}Pvzj4SZVo4@u7qo`?L5oq`Mn+Fd;G7Ed>b58R~n(<jY58n6_Uc@-SnxpnNl&1^N
z;^QABII}ha$w_h6En7PUv~Yq<(=ftup*_(3DuI9y$!{A;R5Wnx0uELcy6KX9N+?7w
z`NY`(HTez><RC)h)e@p6lJJ<iJvePG@nPh`Ou25y2ax2kxO#<G1+&$1&GkRRN%3lH
zA%L{6-*j`(P^2Jzv=ELW7)suf4)?U<RIB|5GRL+~;;~4OuJ+LWA}DlXKQbCy#m5Wr
zrErXSnO*k)FpOEB%MOAvjQ>iXidur0uudru{dfc=^M}8T!P5hOd_Z0Vl9IF{Rs0M5
zxVMR|i)z8GPu^t^qz8UB<6GkvvBC6iKeZ9m&wGJ4+XOWxjTD4~K@$VAK7-|Hcsc`c
z3G+eHiqrV>2RQzNJ08lx0y2_g0}*vuW<cD_0RRzD9f!qp3>}9ET0J0wBw-yJUSl&-
zAI;Gj>9lfR?A>^p=H|-RrN+pJghPMYKXxtfcmEIUdt}!gk~7DVSQ>yr1(xjRxqFb{
ztj|Ua!6M;CKUE|cCga>fA*-={CpTCfhMDP0r#GhS!VhkL*T#N?^U#r7r=Kui<Gz({
zqkE=|#VAI{hcuSAY;U@@*IDb>nD30GERv<JR6eAn6rQf+E+t=jS=aiwx~hA6%&2C*
zYNk5m_l1Ucx3_n<hZ{!dXh+Xvrl%`A9K3sn#bRj9Q^>|77MOincD4cMh2wj7fimm+
z^T!Y5jZW3;8qUtPP9aah2wAqOOlG5gP7ge&zOiPmos^WnIbB^Q++EO+^!Ma{xy6uu
z)0j2)^XG&)`Q@2*-+RTy#cf{}_oSF*VLA<xqi30hb-&dD8P1y=1i#%kJX|#)0f!Ro
zR$^{Vkt}I!RBRGy%ra8FEUk%yUz7Xd;-OAn+m?@^Sif|baFhIu)yncg7B*H^?#ani
zfG9ixitJj*VuQT`U3&WBX^SD*w$4s|<{XQZNDq%4-@d8*`uX0AT`fZ|!kjgdksS(|
z4u@-;K_9}@vC&*9n@jn_zKxC5t?&q|ywhi9ZC!@3JsOq*R+7G{p}34k>gwvnhJNms
zk0`X)#Z$Zj*jqi^T3meB*txT_)1r)uX=tIRr{}Zn^rMH}D?(k}-Jui$0*fgafrE>q
zds~}B7o}E5QB_1!rlH^CfoBZh^eYpbH6Q)ivS-hpTNsU-GYsYX&>ABX#M$MvI5Ts}
z(((+l!jB2vP+2m3SB=l6EHF0P+g*Ti@mEvgl{5G1pE$5?yZC(X@p`auU0?0CA!QDm
z7#gZ>ZE0!Y9Pa=9o4w5!6%p`4>ZzC%A0Mif#XlY>LW){iq_F;S<-i`bKU?YP=}9i4
zDKnk<y=(jSGg`i*`}gnPN%_zPzc31RQudA~Zr{44)mxAc2L<7+TNzCk4Gj#)92^|B
zlV+7b5_a1B_m!2XqdQ#>?Q~_=1G`G?u(+|s#>QsICP9`>0?u7D%#L(hwopYWJ(wa<
zMft3eZ%+yrXcsrPZH;R6RaF!q_`l^^7#<D?jefj5!#Mh8Zkd_q^=8aed4oci@MY!U
zz7Xl0zlpoqh7BM6c>+EfTX-G+PEYp>hCbj6uI-IO8>EAZ`R~HQud$cM_U?kT&f`x3
zlNV^WD2W~OyJz!$IzG5&V8Hg<Jom*{OdWDs6yZ7YrFO$U)Kau3<lFiy2@JuTjsBEu
z`k?HUn|%3*c=Lyz3y+tm<77kEHuJt@cxMY7(1_HjT#1DUNgJXQ{AoH7Nx8WKppKq^
zjDT&46ZUp!MR*BzzogE$Pv;MV&b$6v;Y(U32S1LSoVui=k5^y+5iU00s*RzJfg6dh
zJSrdku2AR_{CF|t_3PKw)f3yrsqt6GA^$6;_(EkGRW$Iz?6Q}5Mrlx4QnKe>^KQr5
zc-vWKY3UO<HNUDu`4NQ38@Jp&;$PI$!-DA@Qmzse^I`XuY(MHR25+5NOTE<Tp64c|
zJT#`%E-|<g-sEiNl)~e9%!`Vtg>V|zVA_kr4YP>zC=~<`GBe*ukKvkSNzcg8X=#0*
z9B^vl>ly9l52sUVWdHQ!OHRV~q1|E>3a^Qdtj>2mL0|P^;blxuqBYrJRc+4C&yQOi
zTU2g1s%Np%QNOa~x|JSK39Yg8Eq$=ru$}q+yv&$dMx!a$;zYn_Ltxn@fjRdZpNWd@
zB2Lh0&gFGR(ZTr0q5E0#(cAYzOL=y5qtDT3b*brztU+A1lfAtlr|N=|+G^6xQi|#6
zY443cKe}6C&+<vo1CAo*!%y(X?fcmI?kerj+TG|ITIIfzBu^3&s;cvrY4;x3>VC;(
zw9(MCDqc?6xp4aN-d_U)(?c~(-^<E=p#-TmMl~MYI@_2<b;W6@Zj)hk@sC?%B#-J2
z|5ysDU7_wk4~pg-R`x~o%E{fRggR1Zpp2@z&zVHa*w_a-`zYVcF&UV)+Hzw>*J#zS
zBGbc%50R?3R7Y;|^G}=a<_o0+YgqQ2*13OXkUj9Ey2^?2#lL@V_@gF1eDtW>-FNN>
zqPHK1SMuqxRewv4|4zhq@xM_dPqvHi<9He-ZCD)=J@15`@mbEJ-VbYMY66qE(2nh(
zJaGESxKdRtbbA-DNuj4h|Ni~w_)^*cOEpOOXZ4Q-#prtMzMWOm)pd}TO}3~lUH7u_
zpI^URJv}D|WJCEF2FjjSWoX37GCb@pxNfYT{iyfZ`)d+s1)cF;AFocD`s_dUWa3FM
zG9aD)J?__tZQ7`K7<bTGnwb^5Qw%G+l8n7T&wiM5?54>}9xGfX3L%>*Y7I(G??70_
z?AZNum`tqxcl+9apUAzo(-%)n;xn93BrKY{NV!9+DgFK9l~P=8CZ2gdQF6)F*0!(0
zza(ZVa>BbZ6RC*j^Bt7$X8qsnfGNHC!d}Y6ib(nb4EpHrE^cmaQ|!EJplE=wVr}!`
z;2TnsGjq20OiX-{skAT>5wp@-Rz`+!qh~PM2uDX6#vMI@GVcL1^0~UXjmG-o1RmNM
z^OBk|Z+oVphv&-fpdWg0`WC6K)?;KodMIj3ZG^}+#6E@2FS)teh;1>h>kP9(cLS`~
zRjtHG-$R^aFJyqm&}>|V5-V(D6hw@SjGnqD@3YK4N7p^<wqrA)0s-oqDDQ*Gu3Ua8
zKNTtitEnzK;m1p9H+&4=bn&2dFD-C%ko4on{y21@ZlPDj$lXNU-9_i5i9iWor^}H8
zIPW(y4X%erGX2T*^^Bq%b`N(JkQ!Uw#&B6$n!>k1XWPMhmHtPiLuOFyH<bPh&zDYM
z?<-!cn;P5izV^g`2Tz!B8Q@3rpo>hRCVoa&SJw?tZE;PFa?=8{kY&-_sMx--@#_|?
z-=cM+mUB<9v`F7Z(1ETL;`H|k>#sSL$xq0IT@2-WFPT%S^f3I>@w4;HEW)-$+_Te(
z(dV8^Em(`nE(3MVE$;RfCrqxRFOeFwzo2UuZ212D^4G`9uX1aiY|*6uOvP_lt5b=R
z<J_Zj6Sj$oz8_)6qLE*PZHu2Cl#I8gnmvh~ef>kP`bojFp}{Iu+s%#q7hSOF{(s{J
za6JLV4cz39nuT|h9H%;S_VC>O+BdR8LpDz=Ld-Cy6R-Y+d_+?&>&w(s9>s{jz^6V;
zS*zLD%DM-gR`uLu(yeq?t!{KYwSm3)4tvb)_LFFV+wRIuYkL}#rw3{El`B`YUO&Gt
z4`@DgW_`89VpG(P?^W*gSShM`bGen4SUX$WLxL-uD+`lJ>AQ7+H{M=0y``phn46mt
zDUT*AKR*5hvg-YPA}@F!i@HPlBVf|?dAGB(n9mr<_W@+~3xfNrgEK&+%66VP?651w
z^zZb5w8<sEk01S{9K~Lpa{qToaZab!-sU|y<Qa2$yyYQj)}`p8+VC%*dI-N>g{%i>
zgCZj%3ybU0vG(GC=;M%<`SrEOXH^Wm^k;{z--D#yr6Vr!QX9M_z?C*7$Ynift_K;3
zOP<5nY+-Kx%fOoS3Bp@6_H*2h+)UG!00nWZq4Ue<&!#?8pQ4dO+cNYsr6@Qeb&QO>
z2CITc2YUeACzlnkK_ryWxWP;6dr+Xd=5_KytUPDwSaXuqPhV(;czpzp@4adg_YuOy
z)8RX;C)$e7dY`3(t|+y^b^lA|ISJ2gJHA=C9ep5y(l6ce{ymqvlgIR4mocQTudnAy
zQOEJIym|YU5O*^&mmrYgqK*u*kW<}p{h*wml_F+PeJ_wp)mL=lUrBOEHtfk0G7ySy
zrK~<CCu1VQ)~7J_Y<Mie7be`z&%5ee?loBWag~D|PpYBHiJ6%>&2E-0*=nD_tfC4Z
zz2Z;Djg@hoxUZ-?Ae}zHpL>ZEV}Z&I?|%%M7n69zy=Yr4#bbnUui=)*1qcd#+yvje
zz=chjmqseOc=3rro>ijKi)3}@*5%yvu%p;G>mLyz$Fq6K*HAzEXa(xF*)>)srmC~g
zpi_WT)t0GVKY~Sv^TS0Kw}#(o4(Elc>@bEm`iq802hp?$A#k)UU2Ew-elRODQ&&)3
z^zqUSrTP=PxX1kW>Mvdp6nvm$h<@As+~|>-I}{$iE<?j(4LPFb0Ni7?xeeXO(7Os_
zojY?2aXRBl)Ue#C4tyIL8hz(WwyPChQ%$}!nl0U%b*JPbHz1C}r9ZLg9N}n)gF+tW
zX#tSE>pLf0iZQ0~q<BR_k(q&qdSsy7FIQaWdzx*7j!9_Tg2u`(Fu9z3s9_&HdPGz<
z+r<xTqoANLDT;6<OY6vYIInn@dUcnC>1MH`N$8g^LOMDozW}9wD{|R}0`^_bMk`x%
zS^W0x+fO^L?%(zJ{I-i|`$A@zg*Jk@A-CRYo*S0i4K1m+dABH4OYo*sW>!{z3#L^V
z&uc9qsfaEMc{@;{mW`X8ZHQ;N&KY#%$gij}!FqWHA#3k4agy$?uKH*R2cI!p$g#K0
zk1G1<P)5qLEG#U*P0_7vm#+o7p)x4q6yVsH+*zNjt{S&iC&nRQpdAmgp)1P;ua9YR
z{Yu_GqJAO%+CDtrM2b{>+_u>KmKqH?mu^{FrVHEg<NckFq@!*g-viY+DYD`>k3Fm*
zoy2CK#XpE}hq<`87RxQhZnE#Q%f5E)T9xA6csXWq$+Sz+7tPK2FbTAszjbAKS?Bka
zX}NB`P;S3zW8kQF^X=Wey(x?BA(8r_>z#}hFbk9F@8aUfTi)`zg)_95l(-qyp9rop
zTba8L+G`(-M@xdZRC8A$un!#R(-@-+vTJ=+jv<y%G7t0IgK&es=)))q|2Gow9hV<J
z7Pep|hE7tpiioUhDlERfnOL29XCZs@i!|do${S1-Jjaidj*gCUF1|hx`)#d!|Cc+r
z-)J-6O;S!Gqo=nv_zZ9GZB&fgi#oq>8q|h8Pf~4X@Q?{)C%VPacOr)mXNH>Z*s<fF
zuq`zN7YZCg4hshhHl4zL_+>6f7NZ?KEFhp}IswTK0>VS-CV-#2ckf=CxQWk-`p<TG
z=6xS8bmd!BRaKMgs$f2F`Xwoeo}OM`iN_w!vJZHbF@Cz<)Ac`p^7+j^znOR$FnR}X
zKGEo=r#CDMVJgM9+8!ctiE`iYzM&!P+GKX2Jt22G)z0_m*?$H3_GtAFO4FB2P1DN6
zdTd7Fjn-6q9*U0CnBcu{SbxVuGwk~8IX)03bU!;Rrc~N|W!v3Rw&Z)FTmIbQpWap(
zp6QMCFIz`_&onbRR_0k1?jjSoA}?Q#1zj)0!ni+2YC46c9%;;)$~<)Nf+;l`GM(2a
zH9nI7yVNGz9B)oK51rQ>pKs{5bv~mO*<!7o0(G}Hc&{oNK2~gqKOp10Z!h1qzqTA4
z9JyBoMDtnltdFH5E{OI*|H4)8RJd$Ff@u74`Vpf4+?Lo9hin--Ym%b3=XGb+Qg5)E
z!epR$oep4xh{FQ%h!73^;&xu%^XV4Da+Iv1vg6<PKY#wbqPkkiUr11}p7a=T(os(w
z+gmZHhNj$KCKSRFi|dy4Q7&Bqv2o(QlxHLN@_YQKs3=NOP5mraBT&A+JZwi+D2J%x
zqH(HjeOC>I*t%oKBX_&04_xX@x?)B;mXv42=%soE)e#{qCp#q5sBo;7{`R|7X0o>k
zsIz9vm8H!Br8~M90dK!Tt?tyqsk;1UaYHwH-d{6}Tl@W^LU_}|Jz2-(M3BsMv#KUt
z0u^5<12%coF>~SQ`Ipy9Yu<}JI*>&y)+2pz?cqc29NEUpH&%`i>p>T%6UAAh{tHs1
zhra~jitfMH%gdYdxwnLL*X8$*hH68(E}RIyaty8Cw~6+{pY7+#S;U;4A_8dle<Ot?
zIaF#_G1!jJgx~wQrQ95&R^P-~1<s(hPaJ>j=b#o3StUv*g%ovJS<0O1x;o7p^hLjr
zJg>;gR<DZ*t}wPP7>v|w3yRP?c0NgX%TqaM{&?xHc(O<x>f|#Sj#a6P73oHb!CGdR
zCLwEx{jJ4~XoW}ot0O|hZf3iX^~84wTg>{3#HY>z+bPD%i7b<Cb+1Ptzq<Wr7Mpq-
zE6)v~s7^qP%rCO~zDG<}w-UxiFCt1`{*nIq{=X<qz5Vc02CFUN)RMb|gw*5K6iKbL
z<8K~UmNb`=A{%Rc^fJk|(02OBsk>i2;nmO&Y=u)Q8K?+uR57~lw0jM|gxh_yAGUiN
z)F|=KgK0T{Xg8GY6}-HoqP7~q+1<f*bg!rNb_xy5B7mnoZ0GY?kxWzq49l8^>PMp;
zIe-SI+BoVfu2(cR&AhD2^g$33p`kIOhT_VwOV|44k81Or8g2B-)dOAm4)oCLshZg?
zOivf5+z|?;poEwDuLU3K#Kc6~rN4(!<~_w*eGn$_I#`@oq@3%u4LnsD20A>!@%}<X
zX0Y%oD$2U;vl;ETk`fx0jY4lluoDJkpUC&@DgWEwYu<T$-;I7$T06<fD>E<fp(vVi
zrSl@En=yDPbL9q=$<nV<iegee3F>|Oz6atkUP8?{wTU-WJl1TK#`o~Jp!G;ph9mrr
z)68^>nGJD4y`Uw3UVH2-7(;JXvFIB<IXFI-5Rm-eyqP?v`SBJnI%g(q#?Ur_v!l&H
zu?<xgHS}Fj4c{7CfV3OT+V<TCFN7F+@1mlT)Y75|nnWr6`V^HU_ThXIj2vxr?i1vG
z_x^pfZn>OY#!djaI{5L7q*T1_)25ih3psuGf=xf+$8^E`_i29i_o1N-jOR_jLF^={
z{~^@S-5uUu2jQt?XZED|W-kN_Fv0LZA*)@(*eq-GwYu-WHudSk=iFS3nD8>T8vT67
z+mTfzbRtPHemAG`hwse__;OqDhgI>PzhF5cpS5LbmLIXqq<wn8xgTzkwYrwANUz+t
zKV7LWZr@ipuvwKCi6{O0tyfus-X&GeAkGyE<CQ<?vOT@LB;dbs?qPi`3E%0{)J{$X
z)fs_-`#u@bKPAptC3x*LvjMU|9?iS@4opl;fczPwqc^K+la0C!#UU{w+07!Hu)wk{
zgSomhi{cwr49=bNWmt9MJ%3&r3~KH?&aP`;-}Br}h_#U*CKJ?iQl!eyA9s9lcupFW
z+aP0}p`Kopd?XLrQFjeB^w{Z-dhg~R09ce6&U=^6)Tgw#SUi^G^HY=btgPY)kuSMq
zbM!oSmHd5JM95TAH1?m}xO!}FAetyDCbB5)5)vq0_f#NaB2ECn<kl#3x?`!{*x0DN
zbu_J~^}i?F@p9Ifmc{8w;!&{0>`svE3ugfT<Xg<rE+O-o6MptaKJn<;v&2|WRpu#S
zvtO5qPC3^RRX(LtI4pMw^yBwNT}J;E85vhU`RlO@Sp`EWc^O%}be8V}R#I!~wycjo
z1l9W^>#*JChKQ?c$FP~FF&Y(=a`6gLvW{(n3?;SKPSt(G=M1%PK)<o8Wzgs3*w#Nx
zZ$O=y1<(xUQ26-yN$cnw;WwQM)?6qCyZFhZ+%Qt@7jRni4HWz#QL=0$XbS4T*sunr
zO9c~QIk{@&l4h8{e=+6P(Lv?XV^gem`R>yP&&+L+A)?Y#|AI&1x%wEM;i)gM+wzN~
zsCCgIC^s(g@7$>3K{2O;E-o%H*&u^FfcOdv3*$#WVh@t}iYSeOwggO3$kqIfMdn*_
zQJaqrtaa_!!}5Jyr7rTZWyv$21QfoN+4vuDMPA!g_ZBtggA=*>0629kEgrLp4kB3H
z>&`o?E2=JSI2`?m=_Mo}12DVqpK=C-XE$dI+_Vj?Wa|b7zar~nrR9BUdAYbKii>H}
z(bH?F0ToEsF0qe0<xV#Od5vz_!tz?6pw-yv`Qzm7TLE+x1KFOfcz+Yt!>haSTl9Uu
zbaZ&8uXzQ^=)1fska>TzDM5Tom-p2|CrzR)tIjz8sOP}^|1LcP|EKhnyNFUm^4A&w
zy%2`)7+<Wc&YMMOO8KU#=wWdfP;mKK5-d~v^y0_?668jAv^V_YZ5<skhIK5AS<#B|
zwRQ)KwrC-s5{0l9!Owvk5VZ@-15QA5prWomP|SjmIQEZ@CT4U4Cxa(D7oFR+Lk|5f
zat_sJ=toHnp9-$RWVbA8>sYMaL6~}{Qfa9Y2k&ui1A{~Emx|9;TA7+QwdW5`P1V*!
zK!$Q0(`6dR`G3lb)s%SB9QEp2YKanej9cp~-X^>3m+7omc`cAV`mNuU#C?cI3SaIZ
z4B!L?pIFjF(UfLBNIvukSCOru7rp*vEv+hz0aKEtrRk%1($$Xf2u~j>ARwwd^S8RP
z@)8<_S#G7R?ZtcXK>R8yt_<;#XB=q4!HE;bCED1?nz>+y_2)?q3D698Oz6g)VIkWg
z{~b{2?DmUx8*2g&T2o4D)>4dg*U&<p9)uvtg~QL&^WyE>Z(gh++s5t@`mZmbb(y~|
z=D1=xl#Ly15SP@^uI;Hf$MT^5(8c3!3Dgl05wbf3N!nOhe3AST^}4!&K-~Vcv#FxJ
zrmc7S-D-o_d6TY-7_X<HuBS#yD*paF;Bw8V+S&@2L(c|i7+`He@~~L!Je;c#TZY@M
z(?UVMq8VkW*yLC_sMfXoJH8HG+c?01EDb|B@GU7*kYUkb3Oo6Suid4^ssx3jxpF-y
z*L5RE$Vpy?hCWC1O&Aet(w14-Co$p&=BBLc9L_X)z*<@j5)w3>Pl}3OU$B|_T3h#{
zIcTzL?PiG{|I=wAiULoc9`MVgp`|UkQ-T`kg7w4!3-9%rs)7gQ7g=yy5K&L<W?rEM
zkogo>Ho=~|<neXaYyTA>JN;>|a1}Zo_V8t%6};Bb)>hQ4e749QtovSC+E9yIEC_VF
z{AthdZ07xi7%i-vcV5v_UsLPKy{X$5{uPpC)GHM%B6<8d*RNi6DRe$bcLyU8&e2x`
zcn$?uNk)1kwhPidMF=w=?)|EjNMu(s<84n+i@j}{6*NEA*)oOx!P8fT%Jkc{H)`)?
z=zM5>hW^Ntgb3S_-&9l#?L2e;=XUTKGroh2UBNo_O44irp=JT>T?Kdkn)wYzMTor4
zefxc#mVPmigGV*xpyQLhL<ra37Z$#}g+y1!gzj(W316dtfZmqxO$Sc*F<q9FysxYZ
zAitr3rq}WO{yi*RaHc+ddwvs9h|0e9X5v1~<yB`uLzq~x@CW+=SqE$0&Run43X@OI
zF+9PG7<R4|>IIqRL#8;{L)8{~BlY6vpYNYfmR2u#%)rlZ7Y!qPF~d$QvA$&16Jclf
zOxi=abLT}sbCQvfXfy}Pt}9u7B(4tj8<Gx1q@czOajhGU=f1;O8CdsrF;nJmVb})M
z?uZJ?B2ND+r|sw1lRJukp1*IzDt;gs;UAGh?t;StB_aIlo<flP-=NiDc9KJ=D#;_Z
z3|9rGzWBb(v2Vit2wFE=2M7MDj+{RvhQsEZg==K_q|y4<vP<SrT&E)>ndJZdYbtC%
z7ov8~a^yxsIgL&OEOq|#1t>J_->TYh&Uu5Ui!{5sx>{KLhv*=xgs$vCP41;8g=IxH
z`G{BLxx!+tshZ`e9F>2!w^x*Ml|WPH*__n6Z%Hu2yB@#svv|oR35n3f7M{Yjm`n$+
z;NxnEO6K&mBwC<8K7-%!XY93=a@8$&Di16#FXvCi4s&DjuGd9H7rVaL1Uo!>TnS)S
ziBcR;p%?t4_?*#BX&D?nf6P2r<L}1pjHmg1-*4|jG00-ki3q=oF?$cQptpc^=-aok
z(8@4IDuRvtOqLCGW#rrUWAo#!j10_77Q&Cg&Y>Xr#$AQ-0ANI@eh`<#f!}Jzttrel
zyxk?S8I_q2IHmIbs}Z)pC8ui(Jy(YTXUcbx$*l@n71Yx!yCb%Iz#IPiRLdm4t?kxR
z)(bb-3kFJOG+WpAJ%xia^s>+1o>if(#JmP_C0`X<hjPlF!4}MM*H>NmPb97V$Tt?u
zlLttTBCZsRDVoS4?3ZVbW9&>&)M+h*iwi0o)kR_`5KKhTvGQ|Pi(aTO;)DSZ0802h
zWdrACMgfnvFGMAG-Wl^FhO0WCd3X%qdu|;TQaVokv7qPC^z^Q|ne*ZRSKP6Ll+W3Z
zRqPv}g1_MHPlt1u!x)WbQPj)Z8|GZee^D53&1x(yB|RaxcAQgp1-dF_Js7FS_6h#?
zEQHO&F4EG{`iF!h+`OBjkt;lIhuLnel=Xi`B`JsZ1NnY>K*XMskDotOA1Z2n@M|tf
zvJ7v&?BC72t)|W$pxI3}{(+8{*f{9N5XM~5l4#QNRc+2L<W;hwcspug8}9>W?j4dA
z_2iJhcCGPRUxjOZ3bT;*4>Xyf<|_4`VMbVNt(DyAAHb~`ePgF+XOikL)eZmYN6+L|
z0i1;<Co|h<k~Sw1{rIEMnODcJAHDGh$Uw+UhJN_Sw!nY5QmmG)ZdD-HKJpZk%e1yz
zVk%#sH2S$7bAui9?+J)I(l3gq;0T{K?YjsBfrKwKw0KpM7KK-(2A48tQ1#PTa(7pz
zcWG*waZ<S^UybyQsupq?1kAT9Mudb^G&N$8Bn{f_YC)93KYs{}sQZ;&`-q#z+O<qh
zg7W!|Kr1@m17~F(7nMU5(}(+2ok7e>yXCDeEgiV*r}HqfZY^zV*l{*C9mqCZ=WVl9
zbk;g<r9F1oSYOn%fBuGDxHDvF$<Xsf-cvfR*CpNIf86H#OLkDQZX_%8`n|h$_&@w?
z=cS$GBv+^}`@0%G9{P3jOa|*QHa0#gvYP5@(}^~PryhT#F|<JyG3gS2h+<c0a`u!r
zLu07<_5FoT8+M{O+{cf*GqsJOUv{Oq0<=N9GCx0QXt}pB^F`%3<lg@N)#mJQ!(*yI
z*A#}GAVfw(6)cyci`=4EfKU=9;y{LqUmRJE(*DtO*q7MY)PB+vu_n74<LlUO4s_xP
zh0N?f`3C&Yc!-eADX`)R%6sVp(Z=bPJe%*jXs`?!%<-|-y0_0O!KS471_uW#tgd{2
zPTRG(>t+7M@*~b<36LlAQ^f_z9LFGN;(}wgK@B4^K;qh`T`w!f8|UUM2_hqHDz)$w
z&E$wy^|WcRtGnyqGJnosl+lS701WvDfrEKI&wUO<8F<%ccS+j(S8BwVY8jSW553{j
z|DZ)&^{KT}VvvdIS0W;uxL~;D$@Ajkn7Y!C-f5j>o^dB~nYxI4%j{I>&v^#{^DK?0
z(moj0^Y{1XwCF;R{@w1!F(NuSF#$;~DU#mhrUj7FoEEiMowuunS6NrYYVq3g%qiJr
z0Iu7|^$iSk>LSE0XB7v|aa<aaao+x<^PI}-dHJhya%Ic2c~<*}MKo7-w_UvFaruag
z5~u#gcT@2BaPhoi`WDzhj9hpgDC8Xg_>;2IGtr3>+<*#wxq7^*mDPI+xqrQYTtTGy
z1*f$O7H^^39@?m(D9SRZ>Db&X<6v89dln*}xLW(d+xz!xq_H<lebpr;u{Z7*{@-^x
zLx!$^>PMN++wF_2d->EYizF1&t$xyBJnOt73pI67AhsZcaERH>yt^763}hO!$R*qZ
z$B#R$E%BazB90z0%cLs)$E_nrkLJ4k+oOtIsE_%cjh}<_qF@FxjRh^;E`dm|_prQ>
z72x6Ui?&-i<I6GJt@>YNS{XtJmCeO^sL5@`5}ZNi0XsAH-U&T|PCz_}^KRRx`}`;~
zvU>aq3t6*Gx((_#S_1)%zu}L!`?em@lQC!$*Hu|5Q_3UNTcKyrrT6ITYO<N`g2o)s
zl&%2?MqD^j)iT-OJfae1ar!BXkA8W)5+_WSEQ{CCxtco4o|(S?M%eC!)-sBo(3!Pt
zmzAHf2Resm6^X#SKuL&_)fYjwRci%ti$oqUe?=YgOZcr;p~Nk*yM5Jb2=XKh3=IFj
z{9c_v0U?OYv17u91_LKmYv1n-*WIe2p;RZ$85D!L(FEnB{ZA&i#R%L5bm$>IzP(WT
zF`eg<7dJCC)vEMk5sAs3dQSV$?cDYK)-kcE<ger7;`r$D&Oa*K+2XL^ZJeeYbGfH<
z%j@a1%SVdEHrE1%SJL`^7#kZ)hOYw4wX|l&wC)j3rGz4G3mY40Q`6HRccYa!{a?Lu
z1#{gGb;zw;KFYdCvDT{mQvPGZ3`$Pqbx~PqGf?rysPbgHScdZH|DA7LpT^%?^bB7(
zfmTM$e~vsgFxGr8{8Kb)0gOw;Nm;$S$w9E>_+kUNKkSeZ$-L&~xK-ZRNDHq&sqt~Z
z^1EImY-5T&kvnc^v$wT1SdFOYG>*2(hYDD{uC09@-0U6f&$YQ+U^n|rsO4>?tu2Aa
zn)l?s=q|i<O0$3xosuvsP*M2#kQsOA87fy*SAU1!x+zv8Omu(QgL)&@PvF1XFY@a3
z>$r0v!d`1+20%X>LsU-%dy!88?iNw-ZTxBsiX}1m?VFX|;7*JzA9DVmC}3Ylp`X#R
zkB8?`t?)`-!iwX{<3wvF-EmQLq(FqdZoZefuT)o8N6&QL<l^Rr<~9-xd$WJe7wq;-
zFS~+N9~*mA(P=5oUgR(4XzP=L?T0lLf5z{O=34i6cPCv8|3+c5!hw4s4Nld{`mV6V
zPkJ8mxJ}2!sc@CDbdW@Waxdz`e*e~khzq<FlD`DhfLlmVqZ0!8`ZR44ywpQu4o8Q(
zb0068Zzm<)mF?vYjg^kB?&!Dws4;$(6iNwHYs$Zg9*fGU^tP@ePz;c){;Q5h_e)gA
zKee4XCO3HwkYKfdc&_>2<rAMylm5S5gH-QIg=^bOJp+RypdAAFKX9}Oj=lo1AEOW}
z#c2+Xrs<;^zx+3V_wpt;e&GKIZL-5g#1|a+55r_GBu_x7N26fnG(Ue{wXMDVxxMv_
zu8B#+@TSYQ!eYGl(7NF$akn&sn%m#Y%e~|ta_%>_)WeD8;ZJZ6Rt?&k<3V3tq_njf
z$odUHUcFM!ZteIlGiuQ=*F?%IrQT%*jMQY`duc%w6gT%7$H0gPUo1$~#>`e)W~KyY
zAsXVY8==^eh}F7{7Nu`+&>fNW#h5cID{Hacvs3;*s`~~8O1M`c!|1XHB>J7Fu-dRT
zRoZ*0MQd`$69n@6mW5baOiw79ObT^MWu^*RQtp(?THZG>cm^C*3pL>FNVkIddmxGR
z?<NsSl<R2}daGxE3Mxz1X57*7fBl**By4}hf|b7Zqd!{IA}`V%MaABOu#&Zdl7X5&
zI9dMpXg0V^#S=W|#A8D2|MV8})bl6ds=j;~rF;jhP(wETQ-fB$!OGLf%C#f^3!vUk
zN^)#x%$4bp28pHRL{5*%NiVqtH^@zQ<EP&gD|#DRj84ke*LUa6drvqN*#>|UEUk=h
z0oLB6=76|Zc1Gh>)gVyirWRH9eFVF~+k-Mt0{B6*fjo^x7`_zWw$ARn;}hFA)^abr
z=c>~V4!(bt(%Sl0pevLQ_3c?<!ghR+#J*F}=JvmGBj)n1rInR$t*!JB>s<nMhM@@M
zsL~tzze>{bmJPCsIb8;RZnGsR&1`K+6OeRt!p9=WzW>h6J%us=>cbaJO-gInJhYQS
z{r&tjf*SSSz2CU6$;!ezY(WwS`?OXONsxJ{>@x|E4Xg*)f^|UY5B&5ec-3Y5TtNh8
z)qT$77fOQYB9+ofPB|&V?TqIg4Vf!fs0SY!f1JJ%eItSD_e|p9ucBAMKMmEW*B3gA
zWp#p5kG<qho^T_2>(*`C()E6%LPB&10v{^(OX957|D`O!Aq+ObpU#D}$1lf5IZng7
z;SdR6_dV$K8|~!|GC9aMnStKU-CY+K(@I_9d}mRS8omLRd4)gUw~J5X+$3b`9#CIg
zZj`skE#Aa%;CXJ%f~~mf+G7&iwr!i9t(!gVxI&3NrK*1~eB}OFCRM$zV{BX#2(nGn
zxEs}o=K~LpQN^eAK^qAWNRryeCs0^^0Pi(%$ngzXX?5MqAQv?w;|DVl+{epO5%2sC
zFdqr7!Z^{9<P_=Mh{<+)KSNg(g@Or$4a3^{Iw{ozv=RMdV=v16Soy2$ifN$j9r+)s
zT@iAYCqS0l+6S+1{R=OiZ548_?qTo8%|Ac{Z!_0X&vG38e((eb$JIa)*F=f`TP$Pm
z;J}+hV<a)NwrrsQTOH%^cSaBpdBCk<XjQx7WibFTy{S!vL;WdWwr9`3{FqpeiyKD(
zM<qZ?KhHx-R&$aGTZ^4w#;`T#B=j{-Yi7IowZZe20xzupYG<*wN;DFenV8i;6C=6B
zAF;7XRf@{q$E6}$ntg7^osKQ^+Y^;4DZfS4E(HH;CN60TJ8y(BDD9}&eNmM<k{*)S
zE<R&7QHHnps%R#*;EyDE$$YF3<PJ0{q_?vvmA<H~Rq@O=6gcisSl7&q>)%SUFu6)+
z)184v782lnYi0V;RehT}32KcV>SZ(G7@_Fznk@OI@}T+ImTd*6ZotT9yuo(M;P(`s
z-n>$|?_5%U4li7gk9^S>G%E35`>?dSYF0%avzYPeQ_}@AZlf@r`5?A;@$s?NlY+OK
zMUZb0nWT8km;nO06}x%d3;!t9`oDt0)4+e4nD6-x>9V=mp^~!xpm{Kx%z#+R*c<@v
zZhpRWuu1`gjXahuEI^Cn)-Xm$m+yzS5~sl~qypK_VXpC`iV>k4Vav+ie4SvFc^Fha
zCYN?+5;a3RFCckXimUnr^<1<rTNK-9bAt`u$R}1?vSgj0RFp*QGVoOp=aRS&WhI;e
znPL6dveJf1K(}Wc5&IvChc5sH_~9c*T-AENecS5qe<GA25pqa32m%Q2zY%ONyCf0J
zm=#&7XS}jB9ou1S`z$3@^90jc*e$ZS_SQeSwJYC42BJf>>^i)SJHSNg9Tc>@GGGsd
zAs`|t%Q<DJK%V@2->#>xb1Lfy8BHJjHWLuWZ6a5+S|BG+A8$bu%g>vAS3-4IArSgC
z@sDm9w`O)oRvZ?+Ya=yL*5sJ?<qO=xK(2ra2{|{p1IOkdOg`K-Y727U3&aJu<8~>#
z@~PmX?Cd)M5tkED3fR+ilZUhxg=rC_?w1bB$RAPhyAKHQu;qI(9RY7cKO?o6j>FbM
z>3_p+RtBeDWF>Lmm#g86UacS1)fy%j{?2{88P(^^O<cbE`Wu!LZM&2|*aD*VaqXlK
zC<{DQWBsna<<Q&z4znj@C;WvVsk$*4$7&D`|41V%ZX(rF>z2gI`Q5w~m21>r&s)D1
z=686`pET<*2AF9aHFP@!N8JiHbWV&LV~tkdrU0H_+q>F$#FezHEdAGDXO@<hOr5{3
z?j%7Y{UP&QidrTa3RHvFb`B0OkC_t8p=pwmE=y93zO=kGOR{1)(vZjap6!o>k^C$F
z+7#aYWp-ukb-1`XKi$7Wk3UPRx8s$+zYEG%S{yr(52~pyh>APOjC9)-rY9Eizka2%
zW)WW9b4Z9Ly#BHDz1p4_Nej1dxBAD2*rd)fhy#x&{d32-mY9s}iu$cnpTkm9l|-(%
zF&6as$><&yVXewiGS`9jJ%f&Md_Hl~yxDc}r^Y;sdwT8;2!@7!Xmt-xdwJS1Q090~
zp|c;jvR~**M;eE(eR|j~6Q9kNXZwFk%vko3ygcN2g!GyVl^)a4UHTacg!2bb7sVh=
zoUib#I{~uCajv1#cLC@ZmJlT!c_iQmikk;S^f@s(#8Bu2Lx`BgVnuH;`?>nxe{!p<
zWm6<FE=AX`#3u%1rhEoukA;j-8l3W>8bC1sYbS2dcetDp3TXiW0VAv3O%1=*5Q(V3
z7ZF<n?*$d-03<)aZ}3TF@}sJ}74MBiB@C_C+D!!^C>#QrpSuU7Ur@T-e|)kjcm<qP
zvU0!8_tT#ZJ{&uiRxW*4>zd;?^`d>1WhV{7PE`(Qi!(rZ0b@H?a2ZA#t&mgWoBe<I
z{UG2RS-a_9DlubTXZLye`59J1!p8lfAS8E(W4YVPm2I}gTy|vlJ9N0ahhH9+2nn@9
zljs3U{@)u=cX^>twdfrB^(*Fx5J=;cyFO*0oXuc@k+LN{vBcaUSmympnP#5zAFAvh
zz5w1{WU;lMw5!?=WH9rw2oN}d6atpCWk)$V$>+zKhc`HtXD*h$NLgC5&_pGy4cdGz
z;><8GYsgv2A?&W|ma0&AulHjwC*S*<_v=ZH{LA5MHmEF00~aSd>0Mk-D*XoJ^BJ2O
ze$>X3Z+p`wUEkGgdrzlCYSyB=u8u0&PgYh|XQ~j=;Fykk`o~3cpYs}r&u!sJC`e8=
zo^tGitAUlUW}ao@)$Ua=j6bWKs*rygzhf8r;;<+^PI+c+XR43yM5J?Db_&`|kNEib
z7UR%!#+*41@pRbCSd|lsc6%?)3{tH0{Zo~EyZ03>I|qDet_1o%LBA#vGK0_@e$4E&
zB#}H(l32JEBd~f+ZNiJ`UiWTj>sA+aLkk@7hgM}KW5neAX$^4(LCX;Fl{;uUja02o
z=TTM#%{MMgy3PF(J02v1@l>(o@o{y(g|%g`t&@@Z1KaNHKO`SKa@$YmfoSBVU9Tx(
z7Jsst_Tq+Ij^xsQ{PdwNPN_ml7=^G%63AMqk<LXf6mxH|mEr#qX`hZg1pzU;8F&>?
zk8!a>V2Y^sXUilN-6R;jQ!}1c$E?h6{@I?CIJ1JTiU2yQYib%k-B*OKKSoeCfN=~O
z9IuVW+7$Q%9>iWx%|6l1zx~@VmZ#(`rq9QK-FFEa*=cDv{GmX67q@@6M+#62RmmT3
z(FVu_36l?61ftbND-0$+ogf9aZc~rK@k`Li<-<r%NL_0@x7rLB5Z2^?Y&0Py-Q9O2
zPnEIDAw}L<zKbF@t5fOY$cJes`jfZ4akudcm?2ufbnzm|2bE-U2%xhlegYyZeRVvV
zk-4t9Ip}^LzMipxbs`v}Lwqyu5+-CD8d}d(Qr->eWAN<k4Cb{}pX$jk37p-}J$tm}
z$Cm^j57Ofh@Ii!4G|dFsTXvnXB>veR4UNjgJ6em2i*Bfh(b@ecz!DGH|8@JmU*Y1V
zq_vyq({B_yInvn$agI?b)zs94uIyj&ZQVT<`;bL=X$KY4IVFG955H4pbr~cUN5@wM
z6h*O6l1>c<%@{HD2441|IcQ4}HZRjXcOYb9)#<g(&2)QM$(a_=<)}CD%3h7s*$K&2
z)D3neOM8%2>?$7*0OV%BRS48e(6|m=-amNuVh9V641+O43RjGRnDiEqf>;a6KoTc%
znZl}C!D9hew-cwWv@Y4}zSb_#I2G@8{a<Rh``K!IKZ0=Tucyr!`iB~q$GUQ7*+e4w
z&aGtlMdc=$G<Z-k)zn#uiM8g4&H!AH&9!CPYv|*5|DO5@#{!|A0>`R@vuH3}XpTw|
zCfU__NNW$u4@)$DR8!2Kbb#SVh^XT;xrKR<rw==`sURj(;K)o%gDg~Y{L^H|NJVX=
zm<ReXzAC46D_$5?#G46ms(h?y`Z4Ui>+9v4&*C22EwrH-yT}^$FM1sCK^w_8FNBr_
zeaD|P)Ba07ivoHTS|E<ieQoOWR&_9K1k)Q$Nhh3#PbMc%9qPqzNwXS1N6DJPxK>+T
zO?mFzIlHYtOTT}Q!n6-(=WTU$Vt-Ky97@iL`XR0pN5AXOfIPggA6;%Yzb6qc_^hG%
zdMKZ}5vv8fv*{Qfo%%q5`RBce&&?lF(1U^q*Q*3!FWH=`5KE?LGVvrL?`Letn>xdX
z6Cxy&%D*9Mtbd@vz7vfC=PvCHujdNn6nWV`ye<Fh_P)GHPrY3s&~|Z(8KI_%JM+`0
z@0cSw+hd4sH+Of}a?p^lZXr1xCpk;W&!0EPWradRL!p@2$tD-}bpOe%{rw6ICMHvG
zCG?Cs3i-`bbS-s(fIQ@l??mVto12?Q=l;QDZpqg;(jSxtoWOgvr@A5u1YarnHWi?@
zixBLXj?^DciRo=_RyHgj)-Ri1TvSxgF}Tj^Hc!jtCQNeSLPDM1M<0cUyZ5k)en%TS
zJs9lRKR&(#N{Ix`!Yz<#5FLgAGw`Cejt8&16L5oNmpgMNiX0&{IC*<JAvk-m2pZ(x
zK4n{RaR64kLS@&#)dMn5bKWcvE=2kGft&BSOHP_vx{jp6d?`yNyPpRsgqRF?5G8-L
zOK7O6pS+;EqmX>tsya+S(bOdl_`{r;^gr@e+Z81{|F8?LO<IoXBVl&7TY@BAxh2-$
zC@CLCFEBZDd`f)RT7S4ny8W+fm4p3@syE<+<M`_C<SDh8wZ6=gkC5}C4_U`}GhBvV
zb*$e-hN;+YBQGQK(|&`qWoHkN<!7$(nylwd!n8#2J%LK!iZ`}f3z_Vi=<D10t56)n
zUKnxZ4+#xTT*Drgr~rq~YVSx5ufb0xjaIb(4)cg>MTH_KA4b*UVtY~F$=ZwRvwQ2a
zid(4GoPI{7u3a8DG>n;tnTJ<y74zQO_xtYIz~lf?0n<JbMZ81{61*&N#%BKg;Ewyr
z>gq|~jL|f~8tGVE$(ci<;sLilHTX~V<a=}$fS^7oD*C3Ak9@R_=T4p;-{M{#+Yt;w
zj_3ybD`8^~@AJ0*T|t8=6C$-5fRU8b+FNrT57#oYb<*RqRcDDoK<%?Ii<?}$u^f26
z(do&}L_HHBtb12j30MO^^FrNvq`qHx6MC|1kJdQ?eprh3YLAkT?HSrJ*ZJ8jKxT7w
zWo0Z`1k&FY`;CN0B8-nVkIMv7XE{go>OP!s46t>wik9X*9$EMHe0%G)#_22cX|>`<
z{6~~kFV+9ATN3qh4(etBHrbtJz0R6iuMututoR$)_2(U`u&klkpZ!XmWq&qj-KKm*
zTISWq8@Z;hdl~qbyskwWD4Cg?Ujkk*6IeB<cH!}bKRS|tL@)+QO+(}I@}*j}tSB94
zV5?eWAuMr1o2^?uQk(Rp9YjG>5(xdor}{37UAuOfTC1GBiG;$0`2mhwtw3ABNmU<J
zWZ!oy(;!Qw-Sm?r8@~h?!b3qrHRe|6|K7cO_xpY)zC9SSLrtlgtZ2$q+Jm#QvT8d@
zEw~@mM{PMzA+sBDWU3bD#i?}u?8GYXZeWhBB)raL>1@~EBpk@>$+J>F&OZlk4pOZ~
zn6>L*n9)7d_(xqGEBKO_I=|rVI~AYL@$=JaK5p1Y&$CfeV;TJFm5zC6vei|5PhtSk
z>?=48HrbFTxfafQKVn|tz|cJAPXo&+3?MeW&|1GAxmLx_@39PoK9G~HiSe`S4@A9R
z+}(ZBZvs(*6N6tpU;haT?dKVRasWJvuPi`rmia$W4O=Cu*wDO}c%lbH*VIk&;eqjD
zqjo_5A}WU>n_eIIpLvB0zLyF5)(Z3R$e%_dOh})$TNcsoD&*T+r6?H7!Js|rO>uj9
z`HomA{S!M*XHNy3U$nBaDn-K;s;{2?&?Pq3E$ZkJP^1^tnP?06l|Cq4l@xu@bOq#9
zgt|PcFI65hvW2*J^1S;%Ey=F8Lv5d?RlL>Y$ZOcsjtH}t0Mm(5;#9T_NJ*g+U$e1Y
zT{y`fB7ryq<q&tnYX4|~=2zR|K=s?Vzai#IV#G&1kNv+3?1N74FnfYbFU7+D(E@~b
zOaj6)g8@rGgggVe1X0pv^^J5sOJ>)RnYC~nKWb+$jOr0v#P&OHEXNnE3*DYuW^8P^
z8u|3usZuyului^vD-`wEF5AR>^rt?XRUHP|T{(iQ2642KN7nxhj@(vm=Itmh-a^Nz
zbWuYiOs-=ULpsFpOxstx%$`*#b!N4DBRApg;I5XfTW(Fj0rebfia>0hq0}*}g2F<F
zZ}C+sk5K6B`s$vG|HVyiU}e-;z9-9aPg~o?)6)%W7ASr;Ha1T|)_xENc8JV<1*IUQ
zMh`O_F|B$WzP0L-rviS|qf2bqu*!O{%s(jep3kq2hJ<L<2{sE->AHzc2oa*xbEW`t
z?z5Ued@q7CkwdcBJXc0mmdo3>OctG>6MkW{X3VO|(qC=a{ALUU(6F$i1dk8)_q#w&
zXg=Hn_)$^78WARB*L7kv$|r_4CFtb%QxvjE6;Pa_xPqzirL&@}Kzg1oh#?lPEe-f}
zIbM5zb0~Am-^qo!=LK`@aldEnpxBKIJFAk0@evYGYXPZ#CcDNmY`>SEDC+HvY<O)S
zQ!W`}s_VUYboA!`(88{L;#){|xw4yoFD(U$lk|5{Rrx6byf#E=Z7|t_UV-OxBq}e=
zBx>f${DspI-9Qg!+WB*mL4>tl$<+JtYNRnfC&8i<62!(^oY23FKlx&=f1q)fieiZb
z0qH+Uz~v+SYB^^xPNV>i*d$v)v$qa5+!GH^19#^>v)IMzJfY91?*8<tR%=SP#<m+M
z`7rmqn~ACU(1Ra8ez-m>&olV-{VIWgan67=(j9BMUoA*~O5-9zfJOR6+Na({c3wsh
z^vn)#R#Sbrf#oYh2ck}XC9xLRNvaQ@GJ23owcMNVpOa+n?d)X2bx`&fv;9lr!<3oX
z1Xzv?>NjmsU6@{kN)6ZX_oYJ44Xxi_z@G-Wm<21`+^CuqgX?0LAl>tp<WA4q!aUw<
zu)@OjZ2uRJ|MnH%%ClrR@2L-ZY_{DV<8=2V>g9i6(DBs6twnxfwPolZh{>~|3ouD<
z+HA7DRd4ev(pf5DE>q)_G#byYb!PO-17(hNwkjw8JHX;0Y`b>Vg+4O_xay99fb(fJ
zz#}gUospK7J}M#-&aiVBm7a%2gnNDc*JnZKc2IH%sYcFgZus)-ESoy|{IV+~M2AI1
zdlJ^Efsg@>jLY1B8il|)O}gJ-YnLjDWVB{fT->F1g45L0^oGBDC?6@tqx)M1MkUR6
zQr+1~0u`p8cuIiipI{IhF;{7o?*!tr0Q~oWoY^2BV(2G9LCVpM@dsX@Y2kIdLJT!R
z`u*uaGb3VDt~naYw6xO-;xeBO^YSVTs+n3_OF@?tvT`(LWE#2r^fr>b&!4r1su^Nj
zNot`AdHW;md>n)z-x+96)l2>(Yc4&~$TcU070rWTZs9NVif`o^wmNnq7%3kd+j?s3
z|Bgqs)9vLU?&w1J{j?1YJ@DLL2<`wjm6$op$xckTO#dR~U;6&2Fj=?d>Xj>fDNF~v
zaMpPTaT@ngzAUo0_GJ<I#?2&Rzpu<MGAi>Nj?JzxF=rN7p4B^SLRqU0H3HmUg@*Ec
z;r@2ysJzb4cR$)P+#}DFVJH&w`iDbgIoa5rz5P^nU}@!pXePOP%#C)Ee`S)wnb6aR
z4-oLAzNo0^XQy>WluD-#j8x%N62J38-K{Uy;a3++fM(|E8?}5CM+MN#mS$;bc@b4X
zh(1Ui!%C1P7?Wt<brxwXsB;tg_FpVHN{KhI!<TOB)+LK4fOUQ^J7e@gqw^#DnFvWx
z%xVhOmk?w2BdU+*GMq#qAcTZG;!7<#3D^x4e=5v7=NdnFz!@joz-?=L;|8^&CLz2{
z-b%7{r8Sl?Bp!agZHJRvef{ySRfqqFy|-}da^1Q{f40kBVk2N8f`UP}umn+1x*McJ
zx<gS61XMt}q(MTu5dlGvl5V9N>4q~N*Sp{Io$q?j_XnKoa9w+Ex5$qt?t9*IjycAd
zKO$d#UnVEHTsm79Ls{l+&kbIXf2KBZ1VU!}2`8yh7fPvXE|X|D!_<r56>3taO*F=l
z?I5jrs($=mW0C6Fs6Und;nSzD$aaG;s+f1o9lr;5guBKkCe$E0#){KG4VG<r^%R}-
zl_B<5v_5xXA|`*^ah=`nm*Ba#KZonj(;kp0EDSwQJNiy1X8h6v%9{hoKyoYqxNBA#
z_h^yZI<8ePA6gqtC=`CqK$0!6-Opm(g7{O6Q#<k8=1dg>v>scuf|2nPp6+#>#(?fs
zX$PP>KSW7cQ$0729d~m-Jq*@U9=fUBbe_J!fmU#E#|9FDFF5OOZ$K_KxUgr3ok<lA
zdhk%cr-Cm13pK*`RB+hTyV#oyO0ZGNsGNqI!`mw>_W*+&ct3RFYpNg1)Ft47mps4M
z)Eq$9@uAk3*542^ddtL1zKomOk-FbqNlD57;j)Wwyo>KcAzGhaoGOpZB`rJ_=jKX%
z=zRS>W<$kc83TDCIV^pTD8^p-2m|Gpm$Q(i;QJ^rn0!(}c2<L^;JfV(lPk-!b!VeH
z+uBYZrw@|(c5D!B8~v6K{(X{Sln3{&+_#?{bblpG?PZdDnbeq6UDJx9_vA|Kzy1`c
ztCEu7cNf-N^!fAVh%DS!zH_>Qh)zh?2lWOA2MOJL<(lYj2&2*3y-@``5}DtN;o*eV
z+<7a&DHLG%ZUKde$#M^aUeEM1rNszITK^evKX|EcI^K^#c6Mz5U@NNyt@wbwp@BgP
z{KC<Rb&)e3s!_^uBIjGY{0|@BRtd@@jUFd850MBxDNcba*(wNr5Ze=`BcN<Fj?7=1
zTTcaim*lbx+>_vSedS6MzUKTPZcJidac^1CIZSPlgR$t-D&Gi#7zIP6zi?$HP<0mU
z*xZ&%R+KW?2ehKTywquXxQSK8o3l73>99Ke2Qo96mvFei&rzn+#BHd*8`|G!d+6WH
z#r~YOb#!>05_#3eMMtmHKMo(1aOLe;_?ywH+KoAr*?GgT_0_p(Mjn=@+%vz`EI%`A
zYir|d*>RNo9WJ%6(x>VJSs9U21qb`mw_+-=L`~X749m#6@1YPUei1D{;RF>3`OOv^
z0DMhmC?c^EFnsm$<u7(dm_Y~(Iq)D!pR~I}$O4F*9(v|1&PyZH{x@SVPgtFBdBL`Q
zk~}qZf@RWfyfbGTQ~}5LZNNhQ8KOtv_f}mbP&Xb{##W%``rU!*--_?VE3lzpmExsf
z1h)n>P)kACx^8E=8y0Rm6%@$9J>Lg8@lPyLaEts@e;4^OsPw`V^7@D)5rt83RIP`&
zy?Vtr)xGwVbXA_Q9A+RnW-lu4EZ9%rvz`<mC3sSE!+*ma1JwUw(8dpdA_B6W+W`vp
zpO}U83#73p#hYL^xpn2ut{kwK>UPgD<l}oHP`pV}Ek9uSVJ~5#G1_!*&e57#pRmrs
z%2R}R{6Pq(02GK}52^`H?4w^FIB$T9iAJxsk<;3eiTjjqY%EQ5XLa>a_#ZTmQZ{B$
z8diG8b*`%v*!sjh$JzJ<jsQ2tZVL*UIgHP-DUaOy19rlRPpvWrnJH4I>s5f>uRW~P
z)RMEd&X%4aggVh(QV`t^?^vNKmi=FQZN*<+|LL_=Af3Esw_rfXS2_((pFRzdEDK(d
zNZ)#`-*qotNlT>kG)MMCf9b-ut*@7v{#nd(N7#M`tZ%%pD!dPrdr`Kr{!2K5hKEOm
zkby#b`Muilf|tJ<yhI3`$#1py^4kz@ca2KG%g_D%0>Qp`4k0H(KR{WtDkt=ji8)76
zA?S)Cln^(-X}562N`-GrRP_DeJvp2SqFrW?ZI=Vi@oyQ#J7C2MBjjty60tog2y|9!
z%g)p^@{=oT4}zBVLT)kOm=5hPVgsb_-kfrE9OlE$&}r7@JE0|3!nxD<79X|OSr~qx
z;=m{!hi+gigIaOHOmy23@U@%a5V${t)8;jjeO_9hFDMt_%(G*3ud?eHnp)5~?FM{A
zO1+6`%!!p(F|mye{FX5BS|Zn9+<08>8G43(@-Ib2MNyzI?ysYH9M@i8L4K*PzwW7c
z?k!At90)cn<P0H!w?3k4C7Wq*8Oqx5)MSKsljFwL$du2*Upr2f9t89cA3i(+zncJj
zOG>t(+RE`yk@bVR36LE;Ybl_gc!F36lH;KxM<j=P1i`!&fKJg&tf{^I6p;8^U`SGO
z+wTSmhN$zd$?jsPdvbzWB<ShFty|x%yxrXP0swVKT5{&%#iNLyPYMbO1g2s?+@L%*
z7i>Kuex#v-hn4k2Qj*c`zy7*~ZZ#<kk`Gv*9)Q^FJ7*1A-v2S-;Cl|yh#IaeaqQBC
z3qO%3lAMvg4RY?UV6J=l;srsKedFi18{iMr{`cvI+Un|}POzC?unPG(JX~Q=;<U_B
zm@?+5T;y17ewg4%L#Y|W5yRuOu@xc+?ca{FpVW7J^`t5n-t(5MpXcn^Ee}FUvD+x2
zY45aCq4(9O4cR=YPQ+`ZUhA%PqL!I6L^XZASD`c8WE;S(-!n5mth*Hxq@mP(M2R&~
zhMJp5;T~_>)jQs1Ca-dkzlQ;kBLNZ4vZI~&J%r-POEMQTGF!=5(Z_+BF)70m`yPXp
zjbd@|gqK56l_(Cp==wbFR%qkFuZlf4)%uBl((VmSJMzhAtNXU{LeltXLY@)c%^pLw
zDnG%sq7nOY04$tmP^yJVRN~CeUeQ%iQ5nqp(&%FSM|2>z1Wy=|kkW%6jo&><>Nu$f
zq-#zWNLNd~jy~o=k!OB*5m#M1pXf>OSs?kko^0o_UkK+EWapyrgE3O&pma^O_|aUG
z5cW~_(_wg%99i#t`s~?Ae>PAgUYr&gjmzW3h)i2ZNM(l>VwhJ#y)K=vFD!@;mVsCi
zGNEr2Rp}H%PAemq&=glnt_{m%PetArCKloPdvS5dNCIaA7S>;=RqL{qfH4T7wEp%w
zm~*udh|3Q_>OZXj>RaG+!mdhaQ1QIBNAJ+kUW5&;AEdKrkN`=I;rsie_T2DwR$Fh1
z-Q7rUF(~~rC|lDYVIU^#Lwo*_sp*r11iGv#)4@XxF|+FnuylMT5p(X>&!3+sHenY5
z!qDga3t!KJ0d}$2ub_Ynd(f|AswdgzO$ux-)nEnqJx2vIX?`QQa%+EZ%dpvWGK-Mm
zO-^rg&bRr{m87!{xx=E1!rY`aC46Zl#^%(NM2~GcasCuK1fCS`LLP<Q2V^>Y*i}Gr
zUGbkA6CtK^{9kwHCK+?Ry1Z=f`YiDaTt}snJ^?X;XR8N}m|u-?4TSI*%n)}#y%Fe(
zDpGuh<~Ku+D6E#2tbMLWK*$LwQPxO>>^8YZK9!I!-yeVh&u{PLKdN3IT;ieAoNxWz
zBhJ7QhC;t3H7y7#q1HkNj;thMYL~36<Jgn?w6%vgE6d^4l2LvD0$8Noeh(qGgqDW}
zo;m^KhYYb7gl{`SSF$kKRn=LG>Ul?ps;=%|2om1(O6;EY8*9rsmCDBu`mkS~fC(LT
zZVAj+>}c)qydDIv_xh*5kETJYqXB*~l(*ZkD{Gmufe-FJ5Tf&YAtt)8@6<=%%Mv?L
zT?p8(-Q={HIWaw5i@w@BI|@MmADapu8W|nHZ-mv#FK}n7e5PRkf^Nu@S|4ZuVaF!*
zWOLvIoBmdY^Vi=LguQ9_dgI~vtoL-P_?9*|dLyGGoga~ZL8R(ko()5STatNN)q8%0
zY@#(jJ*Rt`h~c0p^&(yG6rKWUAW8NUUy91wnmyPshw=*wvWqv5?0NQcYZhKpP;juC
zv9V{R57(>jt1wzAR^-QAuC3^qH6|(?hpm%nnrKdtzmohFA~2W_A97MZ<MRavBa%iG
zv=y@+KQ5SAs!<WiY!IXF;YIGL`Ut`o;~YJG$FBhx+`wm$%dF$+)9tV!aOEEU7abAy
z!_1*Q?}u132dqq+`&Z?`^Wr+-hO*!mmxvh3>+#&s)4PPbPu~z^_%%Lm;O!_%bA-@6
z$PA$@`2`Ostb3wC*ix*5W;z6lIR~<x)yzZr#=8pyMH%{shhISE!f4bf`>;D`bD8YJ
zKQ9kIGBJ4!U%C8(gk!_DC;A-4V$8BKGixkV*Bh7RCAfm)5Z!L;=+Icb{=0W+y2!ly
zJtBgC?*2;CjUM&ZlwUSqb(+nF$H(`<{|0t){9r<fAqEuxbOO3jw%FsT@gB;U5<HpP
z8^{^Vum78yauC!|ASqdE$TpuLmhGN1Bx2cScw(Y^A#zh%<fdqv-N62>bEOfi9fCyh
z@Y;iq9vz1=@3*(x9Q6jU0LvxO#!U2=`R?9*RX;WLpu7x~?X|2N^UHS=9H89pe-EMV
z-Jzkw=-*D=`kmhN_VSTEK=QW0*|o(c5c}&TG9UlO>^6W;(e{u6&Ak=+)7ldvU>I=N
z9wg+19D+WZ80jiZ%bIrR`gQm|(ZGjB3^fm<Vfztmm#^q%(x2$O6DQe=aZROwL$?pz
zpC4nXt8f+ChXes;d~qKd$Z_mEws|^O{QJg@8$fTiX~}`opL46<+#PTX%zqD2Q6-Bn
zpcUk20m~=fKurlUNWv?E7p=g@95Vw?M5JrQ62xYL3<^|cuW}X$C=_5cu~eGHKj3;5
zw`{+sjelijh0t$<eNKkz=rwrFCKI&~n=!ENjOzpA?fdE{w3Ftxu6wHfKd?E~f3dkA
zh&(%RIQ$Sg#2Y1!;`@MUu$L(q3Go6RoxGWUhqdm2-*?gB&LTj*f&RAeDX?B&VM-fE
z%6%$}s)G5nVQb3Uu!cBx<$UYMXiXlkv=a#z1!2~C>(!s=cSGUr9q8Us_xd#3t1->}
znslEY-tbo)>_u2U%NZ1Wk`B<jC#9~H5e9ZNwbsFii9=oqg3R5C?bZN=-P4X<x^zhc
zGWHLdT^LO(@1o`}Og*f+j9Oo{|IWl~S`gOIxgFlrm@3>BLEBL1xp`xx;1=yu-mOo0
z`5y2khr2vEa{0*~+CAs=Z#`^MlCkP3zdD(wud;VEUSDZ%m@KcT=*Vq7nje2%JoJwD
zlu$R1^<jVEZ<_D?)2D`#zkiEc)LqP}vFItE>`Pd?IQFxc|4LzYf;~6mF(g<`pp7Il
zpNfM)2+y#m)0%{P%ftE)yL^I!l_ngt<1}i&+H!sT#)YG7R?4!jcW_W^`eLLxlbk9P
z$ddiUkgpufalqgR!}taBrir>K_>4DW`jVzu*Bs;~Q2v>Fx#_b8q*V@M4wLSo^1_V!
zBtycm7Sd)aVOI|J1vww+!y9$-FjOgeX(@9BIlbX29u}4?fz=Q69=;In!Y13yGEv{6
z*KYoDNG}n^Rxkk4fN~Q9i5kd_^C#bo1?P-OYHCK79drttW-}jt1Bb*|Sfe#nuAv2b
z#j#BB9g1pA%OwJBufb*C|KzxC>$Yi!iD2Z7v)(sZ*?FF5x2QB-X!%;tX5cR6V9RY~
z&N%}M?_|qzbEM1goAop})p9cD{=%S5(@q65-BE?UF2DqGuRmdKb7_(d=nmED`_6K4
zb)D@%BjKa`Cad*;Sqk;_RAfRUxYUFU3%Tq^;lxx6TdQiumb2;@N)P@W{|?NVZzN}9
z%egBel9od@6_46W2$9L^j`nX4REYKk%Y#MwhK?AgqMfLemsB~8IbBUz#zpdUn?XUR
zyB?MNlNOwg5h4~^F~C#PS6y~Z6=)YK8(%vCipQ1bQ(0gn#;Fu-Xm!j$^q7FkLn}sM
zej>|~!E8)=cES~T`VmS>trkuS3PFxXKb_%lXOuz4t1t-14db!#(-xYiqY5*YiEe`h
zjP{#`b2ebp+=OX%QW5hhjs9vP?0Nr`^o_5c|AawfB+_8rmNU)*Q!oc_hI!mP{x@L#
zT+CH85hA+_R);b3CDyd_!-sR#0TyW@6pBJW;NctwK%<>=1He9$<C^tAf4`(12h?*P
zdNwx}rHfu6(@emy-O40WT3XuFCH3Nf)YKaV8!P0a&53sIPrg}PMNS6fr3uMsJl6!6
zQ%vXu!0|5aeoK+l=0<ywQ;||bGLBLFu9PMd;O!bMHcMEpdc$?*2`Yw#&B&qQ7)+y7
zXrI$wWxMpN%+kri1~@wNCB9G|CuJy^WsH(0hGr0x=Hs3nIF?|F{;B(k>!||e6-(1C
zV~DCr3+9kX$>{0D<Gn_J8x7)z5;=?frn<StC`t6)0V?i~b8~8y-@kucuvndM>8W#P
z>6WD%gQ3F?IPg~w>Wd)P!Q)Soh`EvAz@=N!QWDTj_;5>c!3W=xsWb=FDRlBwt=<ts
z-GlTyv&RgKwnJqbjpmjfRJBdYHRx1$zi++=w}JE}MI~6hqG=VUU3=uArlzdHXKme;
zui~Co=HsRH57Qw5!-~r6_ASG7_sAW4C*v%~FETJZILMiDhoNxkUEAiL9g0||*PXxI
z<Z(~2&|Z#k+`heLUHrr@9Re*{GB^G9EviZs3{EQzn+;u73@L0ii*Roq#%QouOU0DJ
zQi-6b?4?(rEJPM<t~(`K=31`I>8=m56xG9UUVpl3kx3}PH<G1?u^<Z`zQe`4j+@LH
z^T9soLwdS$d%lfZ*UQDSvNGHCc^0^M9#5Dm21!Xfb8@bdE;;2qiR3JizcQ+SER=ye
zZI;48iTeSYOT_GXYs+<?f*fX#8a4foqYbk;5q)oQGGe{t;pONza5AVA62PwvU1)KA
z&V8nDv+;3&I3p^}(ms9^CZ@|2uzwx;?r%7Kas!_1S$2iUMVUD|dwNvRn~IyCfN@4j
zt7uVXBcp&NcEu=s>Ep%9;}HwR;eIfW!NrYvV-Ha}965d3;D$XwYDxMnm}n^>DH*x3
zzDoxsie*s@1Ln`KPC143_t&%o)OES?oER*KA*CFF9Rq%5fLe+Dy*?Yd`B8fL;E8LZ
zPMfQnqlm|rR~HdsZF^r{@_tiy3&kn(vJ>!zqm-0JmhC9c+6oHpz0WtARvLj=ks>o0
zF=M{p>j5oWPFk7gw(lWa3iR~!TAPc#dl}jb##@xrI@#9nu@fQ55q&zSSx&JtD#4T^
zu6Ye3z$_NK2+G3+Vm99h+h_&rT?hTyWdJ3km>QgH85oG&=zvLY0o)D(?k%9r?$=6w
zj;hQHRS!!ob*bE<pgN{JkVsd;xABrhzQD}IqGUf=Q=!8XW$RyMwB&E#MoSChAKXVX
z&Lk$IP78L^{uk9%3I(<q@4PtlA$>gNm5*pXM;spLb-nw3X$>Q%{DU3QbiXS+9*Y4S
z(wI|`Wa@xfVHv<NGmJySU|&8!TaLc#ar5>0J_`_CF!m+TK~61hS`XnDbyWnWfsDX{
zJguGPV|uzI3hEXNX-)_FM%z-Qc&30_Whkx^#L0Lr$ogNxtThg^<woHili4ntjg>;2
zqCsp~aiEh*bNoYh<%(%#4ipIqm@Yh;ls7nnJVT0klx|A#3=@+`RyTWIC8k=Z34*%Z
z0$9Mu*H_zQWAO0Jn>TJWLe~IZa9giA+894D>NNr(DK0j)!r+{d6vM8&ckg-!1$~5*
zxJ+AH+p%&UC+;fER>IW#-Mjb}WxML$LI!&JX530bV<V$d_M=<A^!~;)#+T(5YI3af
zD&B-+E2W9J*DsE@C4f8=CzISQP3C1Nrf7e=<hdsrx(B6g95L2ZA7qJBH?>|9y&YgP
zCnkEvlJb<{m)VHuTs`@~&MWMy1?L+dpNF$H4~;t83A0%u&_SD<kQz~qz<yPwP!V$H
zAFvd>T6pIQ4b3%<PI+}cHMMXew!x0Sq4&BZ0uw?E-{s43l@%4DmX?{%QrU;*#=>(_
zAN9LQ+fBWM4Szg@5g7(;rh&>^k@<q7vnh>EUjy2UvH1vqjl8#Rh4T;UkNA%wBWT7P
ziH~0cLC^@ttiNH5cS?~hN{WBmi)RG>g%jr9ii1VhOgvc_Fv)JN7H!s1SapVHXIoeM
znRwAFW}gw-vwQb7g_dNuYypd2S`nrNv&3&+F*?(|J)?;GwDk1MtEb=j`s&Z^GurS=
zO%!vmm=k~L@*gfhNL2DX1}R<UE=+V>%<GXkZS}r?U|_`9$xa^6v;~Kzp@pJgId{U$
zw@ab1`YlHCS(CdGOd_#+z$OvKDCyVjSr4v_?3*KIQvn>Gn{wLh=rywydAD<H)H=s<
z6AUaqw6;=MYk&h|`0K3s=K4Wd&d}KzdN!^Q@z6fOcXPf)Yq#-~BmnVZP(<uv&nDD!
zi$(KDVRW$yM%yzKZubpBHN~d6j*&{f)$beTMw-d5wa#AOKGbw@Pf#xBJrfnX8oPTI
z<o7IIwPT!o6ncd5Xws~Vr$s?voS4c@5KbRzYmZ@YoVdMxK2moBrtUzfsF1+>?^DUM
zOysX+B9ZF+H29m6SLJNK_I&Ca(zD8!mKxIaun$RHJlR88Q{fpK=ejm-n;6jF&Uyp0
zHLu4-uh`SGaZ~z-h9+a54I{_+#5x7qvksUMcZGzSfY@E-_LP5>#eSnDj@m|<NlH>u
za$uJV5z}R20z6)8m=D(#kN<{4Z<9{pd+wEULcn!c*rfGKFn~>z?z;57ard`MW7RC1
ziQe9l^OIeIp$?gi(Lvd8qSbFp9k3jrSIFaT%*26MI&MmdK?$^xn4YRki$HDcwE6-s
zsLuN`iymSev&E<bN|!%rNb4srJZxDyiXn~<j#>#a$~L!&SB@n)SH<w$u(Im%l`D-&
zN_mW6-^@?(@WS*YLa8>(X}L-T4J{%)jRbL9TJ8XnO?GI2H>N$E;+66iY>V&4SR(kP
zEfpcbD4v|DtgUSc=YRfvgMpbj^GBLucvra=k_NbJMj-0zx2KO_25hovK|{my0E!S_
z-x$aeI|{0CG^8!rcY!*3io(gmBLb~-UKqqS&5hiQ4{|aw`P7`adW-lA+_z>6RvgdT
z$T;h(h<5w;K5dIz0#U9g!r*76gla?d;m|UUV<IIcE`2h8Hc6gt3Rl;y>6e$6H&_#_
zKc6caDwmrS$}!|8t7q8Na7D=~X#Vj9?M|wf#MnSmN@<i_+Tg<@+v*sh-j`m3z04$a
z);jw0dL7KlSiDl^=IM%x``Xc2X9fZ=_A&~6>Cuj?WOa3Q^WQ&j8MdX~20bM%V|mxk
zoqFJxVsJwgBG16+Xf)LFdLWLp!{Oa$|09ZTs@Gz%8b%xAyyP=py-iL|z8}IFg>h21
z!RAbyP3~jWShbtKD}izvSunjzaTsXb`rtpX+b=yTP;s)dVwnfO6os>xq@*{rYUXpp
zViR3?4?r_bYD!*|Bq-*t`|rsBJKVZ;s|9g&9hoAK1jfq@w17r1KhYrrXsGf#XB57n
z4?-y|eNusI3XTAoa*vm<JUpafwF-|;wm+Y0Iq?Ii8-=Y0>;Uefo)t}y{<LTJ@0K_T
ze*&Mi9AC<jSIL-#gEuCRGy*=$$+H^<t(!0<>Qb@NrvduZ7|#Czq4UU50u-Nth*t~0
zxjLLeQL-7V0njUi00k1u46KiE+*$JqJLBA#nn>B#ue2AVVlW3e92G3ar_r3(D1!0p
zL#r<=2y)B~vd!VwK?xAm(|e_^E`J%WJD@x?f+02jins$g6v50V9hZK;rR5NvotwjT
z>=G%Q3BqnhkR6@o9AkZ2R7B97BGLP~%*rb3?;n$H(npO&nk?|r+T!FY<B5HDA3TuZ
z<FiBCC;_B%9Iy@8^%)3QdR$ev|M`ao(zjo~epOagHQ?;_e*3nbrZ?i(FSS$Xv#M(-
zRH;6y$41M5x!v>917r6%qnIIreQ@j6W9pI~``I3;_rEZfDISe?zkQoyDx2{!p&NGY
z&HB^5&zYPy?7e;s1XG6T?%lUf61JVVQW~dCQZSdDG+yWrd~W>u*#L~)Ycb$|3$&o+
z?lvn_!8g_U9}UiWN3fkI>c{{y^8*U}(kh{~bY|w9sW1{8ZM|L}&UV4Ve{8#??|F4i
zD4N8uTtGI*GrlmQ_dFeUnK)~&qJaC;!RQO>5*CBju(4#S+Q-{SyiA9v;uR<<DfQr-
z1jg18GP8^ViCeb{Jz(AkR(w-JtLyob`*xO<mt(l85Jn|el$C|Oe(liysZaZPVe-ur
z`-tt)p6M=wP>nT;yeSG>LKh%9Cl&J+gae-}DOzI&jcX^&(bxlrG*2M-0=w7wKAQQ&
zYH0T(F?B4-&rcdjWCPk$^Ru-a8TiF|LuXqnK^sP?@dk!U^}kVQUS`X=c}bT{Ch*^s
z@AKgqOVS;4(r(d{VK<1aPa=t4y3_lN>85sf<mPhd=JnO0c=l2oXm%LYzHImUg<aKL
z7d~=?p450Ae~#A~wo9aPS`)*J;`&~5^h??SXT$PRc!LEEHPkeXIt5tq=14+v^76>{
zL-Z5-<A?31K2bV*2Zsze<l)Ig{K9^2Krwpx42d^F&|o*ontPXM(ckB9PCYvw(t?Au
z+~Od~S)SK^H_17d$diXLeTnHLx5X$Us9dgF`4Z2(--`70Ed4g#cl(YI#n+#&`6`U8
zQJ;2#0<964k+3WIzMWjl{bZ+jy4Q~1Dq8B@yXP2b)E`?cfTBA=hT*E*Ou*KyYa$!I
zNaawM1xzTO;o&KgKFp7xJzR2-hw&sO8Ce9xBbKN2$}o#Z_s4SR1+KN<>U(w(zp!?Q
zG<y2_4GBC4fGghLexr3^+O>`N79%T0YDc1GR@YjhqB-5T=iiJwz84dtXK%dPq7yK@
z{{-<5Nnw+}j~Yu3U?7tuaJ(xUJgA+q4=rG=^UT$imXT3%a&l6uoXcq=AE|djdb;<M
z9nQ9q7|<?{;<#)RP45w8L+nl)Pl#B95VvFJPWjWDk9Qp#K}DV9V?k_v<oHJp9a3fF
zymUzr;g6QS@XLXxU~-JbBPLbi0MQ}*k{LC=iX6e%bfGiM+ew_E+hR9gygj)(Q*{*S
z?u}E@ND@&i0f6Q|eT_ttB%3~q-3Bi7>|94rfMe|MgHB5>%J$P2_v~ikBWBpk@+<Ci
zzHpKT@9N*L(NMWGBj#0$Hq-9zZoMvcX(U>b|NQf`tY#BatIYe{B}Uc`l17OjsM~g<
zieg`Ob~X(sry>RW1sbrz^oF*gB#CRP*@2>hC|RVWwbr<DoSjJp5Oj`nwpL^L8yC#K
z7aDQ`NZj;Mjzxl(_|3%nGCp*EwF!nnBBwsy`{8ns`yUqz;#<5f^B8YDf`!9)a--tB
zCk;D$z}6>SFaA9lcTkZ2bMc}Fkwo9cK9f*WQ*$4j#h@;IY}q3;q(%wM*Uftmv&je>
zOt{lSJ)Kc#L_{cnEk-x&`zzj_V$?aranRCcAx9fAMw4+I5bP<INp_TQqP)aq5LcLd
z=)4!0&~te`Tv|7vwk?WmkRZOt>%xMSuas|Huj5y&T8E~S;IGg0rQ*c*T3;O?{b&8h
z#^3-+0`#Si^b8qNVsko&<#^ra$1Zc_JR2{cY<ISuM1|PWnPW8yC3jOm5&}9gY>POc
zP|Q)J8f~t$RLLV<{Pz1&$kH~B15L-s$rHxDy5BtMh|#uV@D{=Hz*k7^md1M`TmlQp
zP6ZdBqK!~PvDb{ICo3!QZPI>aqMq{%RecxHmTRFO6&)?k8_WFf9xxdA?>zt=FWm<4
zYL*@UKINbP%%5fEw~tkuURY?xDM~;<C=+iL78cG-PmAg5#t|qKP)OocK%3PZXuP3-
zGcU4^6t)E-_qzQo!lG!*HDMPlFD+H5UPJ7?jd4o=c^aqtE`jzdT`>2fNK#z9*L&X7
zisk;@tCue)S`MW<=V-*Gr+?QizfK~}|MlrC>F4rk-jW7M4NY){Zk$jI=+E3n`gy1H
zIf)dzSzA<ACPQ<gvGUVD#4?u@z%u`5mov#{3+<oHPa;`7xuE>#K{!Xdwf=cxB;E!A
z#53Y6Y~<Yk7P$WW_5c1~9)kGD|I-)imj8Qo{*V9e=XQkp|M5Hj^_R|M00;k1|A2I#
z_y50$e;?5QXP$)7e-2D%Qxg+IpAhc&-l_Hl(82D!D_qfId$#}2{fgEeBL8<&>a@Q&
z_-}||R4R2Pea;ys{kx(`&KGniJMB)-m=4O1jGVtHWY}Jc5_I!c_`kcLkqrO*&sP9*
zFaN)P5;=~&^@w}h?SKC->GMej-K3+(Tcpi~y7`O$>*u!pzx-S*`G2oxMicPQEl2MK
z5ce>qiP5jb*V0jZI`QQk?Y{J%ZFd_9#;6DRe}3anc?ce!9iaSPSM0K?@6e6Uk+xl_
zc-1p95`kidhsONhPq2ORKW$u`i!~Zy|Fx-{qbJ&rUwSv!BvVB(^G@I$J~Zs}zmID4
zZ}tD&F*$Ke{<$V16f{z>ydv>xs9!rVx76pvd}^W7>;c`)*$dAaoNa7vD_dHUdl#eb
z+0b6OlFnM_>6r{d7OkVUwu-2(?&TeSk>>x&v-~S}B%1AL(cV3K5ZAeX#AaSUbB6c&
z^-mBwIm0ff^Gw#S$Ga${czMGv#C`lI3D+nFOri+;Mv?4AT`g*A>iepv$017`k7389
z8|7rqr&z5Y6&;}LL{*S^Wanx1{)#bppccLA*>zx?Xz2(SGd_C!_?D@Kg%5!_4)>NB
zxb>adw{ypi9T**oN*dQYZ`qM+^`L&f<w4St!`hM<qAX9_NGuCfg~?BzY{fbMbYfT1
z-{c(vY1%yx8OQ4dr(#q`Nz-3lA1~EOm6GcZ*<&<s`RmbDfP`MOG!-$APVH9bkEJUv
zK0C9p5VzzoA|BGT^yDJK@t(bIqB=UU_V)HZ!49|N<c7R`ENXN+dPhd0;Nf~(AX8LU
z_9^lS?_dXI&_r8`T~205tI+f`$HwX)qp!k%xwf|B#CMVBH={5O&a4I?EQ7l5=%GVI
zt7-(T3fQ{5M%ojUYOg)HI65ellbcJ+$@xP^R%=iw&ot`X`3UGXUq5-m*FQxS2F_M6
zx5HiJZRQK(x--ed`)=IR%m0Yc^!cfnuR$D*Z>A5VtRO)H%DO9<(}r)TR=X+CCVX1x
z0ae__`g6%OWVcU4oHnM82vdMq%YFNwwNvGrqX`2m8>`0TP0Y-5r#WV<lh0AP^!@ed
z7#5f6Yn=Ry>@AjS)Iz96j@;eG@~~3);zbL*fVp8cuG#M@S3NdAZ}Y6Iooe}~HMvm!
ze#uEvtjwaGam1>HMxIP<h=cFp!-we{LCJZJL*K%s!{hVkGgyVvYaZ_I`tKO}TwGk-
zJz6X$4#&wn;@lFu14||+Qmkcdf8*dfN5$|4#o-^X`E-B6MP<I?{DV{b?N&xMiD?La
z6h#VIAptiAqF?o3u$Ap_xZUW)g4Bi|%pnY0M`Dk+r@w3&Z?lr(%o^%fY{az0NE9<|
zj=VA)N^xuV_gJ`CYn1TX$FA8tv(^y7lRxPb4(bSsB_UR0)ffB2>95G9RM7ZdIIoec
z?6@o!7~}c!WmCo5z9WbvK+>r<8E9#LWEuv}mmLqi%)rocwxcdX{~$Ui^*S8iF?Tq<
zaD9OebzgVV04Q{r>84F{<3=Sh1;nO3<(Htt@__hr^L@t;9SXyUI9Qn1XpLE8SZI5e
zu_qe;@nn}g*do7=sTawxJc!qCp%nOZO~`iUo1nqu&mTxZp@o-#sorb$ZyyO1o1A4M
z5|2L`?Lm54VrA$(T{?97WhX|Pd>T5yq?y0%V+f23^h;k{Kl<rwft}@8Q%gwltWCJd
zp5509sdnyqE>2@{;lhPd9hIf!9gG2n`d8R2`=^y}bMGuC`zefI`BR1njFx~)flnA7
zId&{*u=>3DuP<!45z~Z*(yy7)*4B|<zI-`)`ZN;$&4j(jYb5-nx9v<qE&NTVwU);?
zP5!G7S#XwN$9SE^+}xbFx%uAPw=+aFHTMqmE5^>qK8hZ!E;(|viBC+de$PSAAE^&F
zEk<Qpw=iyunQLmMqicEeWE&qmxNT>vWdaOr{<)oTP46|G5HJYiH~USukRC-QsOYck
z+VOa2vPhscfHk1=;^E=d>E<JX(xEx)YimczJLJ{W-lDmc1N|)qh!jSiNvJE@6piQs
zng1A>b+QLf>G0y)^F@tg6QKKOTq@D3c|Gq==};iHYwwmVk4HPKRJ}$bW4VoZJ}EQq
zC?$9Q+jx5{4~ulE>rVq^<!&j<0PUB^pqHj4(32}4wZ^`=D>M={*(EWz&~fkMV5X#u
z+p+5bOk<XaZEcK>va;FH!Z|{OB@taRXAICAgMgZj4h4)levT!arE8CBZ9ipDQe$Jc
z?L@|LfKk8XI|f6z8W>G_8ByxG^$``!*|TDQ{q=GM&L(rP5Nd3n8Pg+H&fRy153@H7
zw+3*n(g)TY1lEO*A+Be0ZD_w?SME!<y~JwC`<seS<JROGGscC^vyA(9y4>P_?!mZH
zcZcu!KL}@+Z_a84S0`ltPNEXIjd4RCA{1z8<DZ>7_W{6w0)T;LY6VL7i{)=Pw^u$k
z-5%tLLuiet8b03#Q$qr5iK9g~Z$6M}8|gsTTK|Y_7luhvkfg)y7LP<|b^{GxU+P;t
zR!+tG$gh41xa=5&eg~Aw$C5*3Cp3!vk6pF>KD-#f)Kf=ugg0@dE<8f3I=5?>z03RJ
z1#`xeVCd6YSsgrj{J6<y+zjIltL~h-;l<G=6$OVuN=6;Ol|?Ga>D4dKW-m;)pJB@I
zt)EI%xau^17H8Vqw_?<*J9MrDog8y}ZJ>7Jqs{CKYKi7~lhv2=A1<Hi)_HAxo<z#f
zSX=sL`M|EK+RUf!Z2jOgL<dY}gQp8-YsNBu+zP-UI+<@4F4lKhfoMAHJ<c78=Cz_s
z(h(W94Jho69zCiwF#zK(EIhmUmLhIBIyQD-pbc0i@l4fWxA>2qI1!6?;x5moHTvhx
zK{_TYBosU$Pi(8n!d1tF;41-rF!#`HFp^ePeIuQ`;ktJp@$$li&RbQmRZ#G096Hr5
zJUJOHvQkoVKE6v=#jxhzcUFcb?Tr;xiTgFrsJphPO4MH8j-S(Wd3+8>i1zx*e&!X2
z-#@n;J$5XBq6NW)g8c-`Q;gbTdbXSND8OOWGH_qjch1`yojYG2uf<PVBv_2G+Ssk0
z*soBqLg&_Z@Pz8xj;SwS_|S)Ud$N68mHzBfIaQIy>Xy$hU$8K9my%!RC)Kp%S@EE4
z)R3er=#gKee(4cP+a_4~5-qWXO$0y$gsM}?MNu`I^ve0M05EmRUJc0S%+LX!YB1my
z5fyy{d85>TDP|ED8w@#N$F>*P#YiWvh=UE?f>;b5i{XtBY(FeBg}w=QPh;&*vqeEc
zZUm4D_U88u;?Tf!5mEP+aQa0%i<w9SeDk5;qBzT4j_=UBF~q;eNsC`DM<g(C`^{+8
zEgr6Kq2uIy=l17$lOEBSKChF7U7P?89)Xg(_wK<!u-1Z|ffW0f>G-MRGbr##qpn0c
z7@NFxo6C{E)q-epwcH1i>F3A&wPucvLwh9lhD3^CGwJn1uum#>X&4wBj7H;Pq|dV_
zLKQzx;@D5g*g0$^E&aZUA!>14ZrQCTaCDvd-8Gk$QDoAMXk=j<1SDi<%VN^>{h~F~
zHxs)^m(F$XCh^Wcb!GM{Ru#qI6nK=1-@Qu(DPb#9GR|H|wi-2;@YvBY-AlA~P8=g6
zOW>H4Rc#atMdw%Rd$tsaC)r&cUO}Br7mTBEx&V#~aa{SvNc9zq0|al;sqSsBU9CnN
z<sjI~wO>wc8?d&ujdOBp@R-GP;$ZIeIew)aaf6v6M4NzXzXT#UDG<ewI5guJ$g&HJ
z5y@-Qlm$WyD96d7x6~wJ-K@iK7QJjW#!0{HeHkWw50Ic4KU(dQ5ApW&^vo}C=pP%4
zsi>gIFrr8{>ar#9q@;<{91A;<Oq|+JM_>2>&3v(wC+$SOdU_hi_}?7zW6TWYUO&dQ
zJ{Ow3L_ARv>ACKn9DW^kWrukikw8l~;DtnbhsDE0?qso$Px`EkDCWVbj7$WuAW?5S
z+v<NN^*wDT7I#-(NAHqP(G!QCysl-*swmcJ=wuwjedvn9&Yb$|$s|cM17W!_rj{4S
z+M8g*{fUatqr5J8>UZTfwP#OX+C#3R4j{8B$>B*o{3@gsPV>+wCHgZsI*A06rAXYr
z@3ArCd#Tlt6su86PJVpUF+<EX>IfefzrpVLXK1vbH?^3-T=bGf_~wY>RW#3QxfWTF
zEuSDT&=e$gx?N_qE&>f80V%$G8Jupnct5Wh^VSYfmk@6xEqGH%94&2bOv~D_;~DMs
zPZDL1Fr9aPyzL%%uZ$c@W6dViC4liFJh@jq%PbU%Hg*yG3|I2#Q~ReHw8Oe6NYPRA
zZ;PCq>r<eVUhkuN;LkW(XnkD)oy_B0b9H@4u@X)gfrn%{zTM$>amRk6B84iifNN^;
z$aUrE$}^LbLv0s?nb<5h)`rUQ@QcS8cOB3irrKOeBcgn4Lpk2@GgoE_>1H;1KD;ts
zGGH3c5sW@Km?+S!ZvfyWIW@S0w4g_%D5l=N+m=t9e&FozV*eK2>JtD0c^#6*RrIUg
zyB{mxf8c-^4%qr@%0GzL@7#xd(GbKo%V;yR@3vse#=TQQrY3K3oaxN;pA5LE9m2;S
zDE6C|46PKc#xQjIzpHPv5<10tt!sD@NxZK8p8#;+Fybs4H5Zwm3Vf@sR+=Dt&Cx@L
zY>;PT+FR(-qk;QDtVuY(+ccNnoIO9G?CIwx8_`4b_z&{f%M6%rF4vAxmjH&l>On=-
z)2-RcF_o`8U`p&9%piO1ioM!iP~gMy*((ytpytTgB2$8qHpH`Okoo{6(Djkh<g??8
zqy0inr9X>Ds0U_$J)e>tUrScRLvxsQ*DY^+`BF%ck+@^(S13{i&s+T|Cr26DeYWsU
zgl*#`IhSC^#^aRVvu|JgLi+Ud1cD!mCbX<mSsgbw_+L97KX#1vyaodYs!fjRjFZI4
zF6uMg7ZdBSdf>i-GJHfB9oLTRq0~_&@&V>dcSR+o1TI62|9tHTN#+B<Vp`=E=%(dR
z18j{BZ+y=xiuV~IX#c{Lx9=u?mPo4_-UFSlL4C*Kb>Iga=wtKq6%!gj<l;x7EKnk!
z`TA{OV4l*L7@G;#&Dlti27sHfDJgY2vUgq#Tv&R4RRdRg^ytXUz&+-xWBuRA1d1FS
z*2mkWd3c<d^qV_%WD!9RoUTY=??NLZ!))k4gc=GwbXFW(+NYYTz2aZO4mx0bN+htk
zgK=VIK6?LnN5<Ia+XPUc^8vU-%8nd<ck-!163M;aL*Q@czQ0noO;nP?EVIQ1_B_FP
z`0tE>?WBOiu+WH#@sviN4pklvd_QocjuM5Q<63OtQtwT-zdnL_Azk(U)6pWjORrpA
znK4&*_9K0f={t<i(g2~CCqgaMex|VAH{todlX2iZNUm-4x;-Fbq>zlteT=z+<ljR2
z(W4ifTwGG1fmQi3jMas2lTRBYr{J>9mVXGtt*E&<F+kt<&z=njruh~JfywmIfq{YH
zwdE^@t-oDh_N>Wt$EnN0t1;%m<|{+xj8T19vBoebmxtXddF>d=VI_^KHjCA9AX!!6
zp78$thS9%D1nJJ5%l*&^rGliaZ0w(MG&l|!bh@nN!s)%Z=el?)m4M(-L@Fd)@swQR
zM^2o$Vzro%HH1d(L#>b>EA#ppx(&8I@892j2V#ifoX;YDp6D4~5JGj_g3>-yJ`)EF
zmc!SV<y7{+GwGGTzrTQ$pgYqa*bn!c=}mOnYogb+5Myj+L}q4JnZj2Svy`Q9m^96P
zkV!7Y^UmYr3-|`!7Tz<_#Rqnf`{>sb$Oqz}Ws|oT(}okdL}T6}3AwGbfiYqty&`M!
zRRw09iS{P++kG$Ks1noD3w@;vD}pG@iSI}cdhvoLDtbYTkMG0U`ZiojIMP<7T<;jd
zWCg8e)O1AAo!{Q^b96MG`1}n02l)JN$mNkwBUh=cDFnUd=6n^yt~s3Y3Tx*I%3gg4
z%(I=#W}o`~`ws4sXkCM1WMh-l{z)USIax*9?7WM9S$S52^9Fy@M<C9tyCfBh_UxHK
zrjv+9!SGlzPx8#(S&wYTwsTjm@M)9_zj6CD$}~AQB79Y8MXYQSsUVYSKWm20-{)}z
zqh7!|AfWlmiq?pxgrZD+3S>au0qtnnD4}#ackrMmtl!Jr+K8TQ;l_$tFq@a|EE{Uu
zTK&oEp(CX)HQq(Gwl<%-p^0km9Bs`=Ii(#h1qU_V#VD&XMwD*UL*@heKcViOui?07
z&|QO~j#0go6?ROOcqe!kL?raT>5nUjf$k}_H^BO;iVBZN0HczTQ4#lG{%p-*kTTnP
zQ`s$rnRAXasBB=1va6Y#GHYoE?<rh87_6*_V^`&+)~1kVV$N8!`~B$q1#Pi^mnS51
ztC%RlRFQ_uAsx_z`{)&r+M1E?q^p;SA3f49vuX=X>KWqDD=rQ{x)?Z<TX&G><MrI0
z#u1nJZOJ_Eyn{NWkQ0le<isAkC<Gwh8{W0mfh{0P89Q+qjpr+Zb0P-7NzA}NpUIe#
z8g&)ULp)gw>j{NTJj+oP@7L~z5#juT(!zEtb3%9*pG2yJ?hMCzdn><kH$2b4K!u)x
z^mq%%xjH4T7T~L@BwmtX9kWKlhAx=##S0g{wX|gQIywy8ed$5DemjtPJrZ5>SX6tJ
zHd5Ry$%!()JeM%IfLQ71-+?D94ox^5>mren{P3Y0^o5706?p!#D1rO?`XX?NVDJD5
zjBH|mD0P^OBTmqhvFvN++n5+%z($)>Co0kGmBZ3YfbK_vp+=5Tgv&0PZT_N24p{E7
z+O>>^ol9gKTP)ETyv6VOngGE7kzEiv&Y(4Bt`*H}SZHhfDT7j{>Soq-!PR(i3ZA;i
z4g2v{H3B4vVEsDZB9ghZR-gKi4m?_EHMPHw&JWFKf2j^k=I)SQw8>=-Y2)ML1Nrcv
zB<F)8M~)1S#B6FZ6`Cdf{CNn^S&PwNel+>2M`%EMIn4rGi?lLtrKXLFUzIO~4n_?z
zJs4Q#0E#5sDwdF3p4H|@Eb?a1gEx$oCOF<le2~Xbpd%SZT>`&;y*;`bhxQbaRJ3RG
zNSD6G>$YeRF?$`I#nde!V^Q-}G&w=nA(L6%0itz4P1H8liVh0|wgcy<l1;aJwmQFm
znuE|nckS98O3ILx>GCPMr0YI?RH*H3#}Z`>+bx}(oUqmuz-E(xw3d^rpdXj_<cU3?
z9+cHjEn%`Tldl-s$MZguhb<>T?4u^QBm&bTPoH{Vi#-is(x->g4h?*%(+WU&RDX!w
zHk@=43~69u%N#vNFCJ)OEqJE;PX1f#^V45f4jG%9vq@QSp&6L{&MU8?wzfz;hhP}l
zFTH{7WfXK4GGZ-)UH62A&oMu>jfsr>2iXYuu}zF2*cV8C(rPM1>&C};R{k8Yd!m&K
zR!%i(qYu`M+A5(y#Ahm^$!17JUXL>=Bj5c4Utg=3MN)=OOI&3CE2Y(BlvdOw23OPe
zlQ)AMndGD1S`feft1h>5N@@Tkh50BDOVoY^1R12RzXva!j)0qFrGl?0)1hO`P%!r(
zBIulcZ5Ym7(kX^sew~U6ig<aAS_)Hhj_8F6vZe^Z03ae>zP?ts5B$cE9g9KXXrx;4
zQ$;F<^Rm~=PfisC&mX9ho5+bj&z>6v<2sq?Ja)Eq;JX3WHom@^Wkk+Q<+zmj&DzII
z7<A)EVi0iBe1?T`vuWbKoh}gahk1K<@7aTi05LJ3RasyTJb|Qwk5-4FI0o{LhWTSK
z4wR9XSMfUSid6=phyZwUKfb#2(6F$yL~DG^UEVt|Z6r9bRgMf`6VgNpMa7O+@TOdL
zMZdNVD28M|xpX0w9DBE(SA<7I{8&&%OZ1m+#TYcMz4BI*uTO`Corzes9Qncj>(|%C
zMI1l+P~0;cM&KaFFOG_uPt+N+M_8a&toQ+1V7l#m%h7V9hrp0P5elYtgf>k9(woGl
zfoi|&9W+@NZq9nYzq*>-q)XfL0CdR@`^g=>HSIi<l==nO&U<EMHV)1w-_Y*YII(Xh
zamLx(+hrJ>j0g);Mfx8LDmU?q-d_z&x17kLy^_CDm})iUcvo0B(>gfO%{2aCxrE{1
zgrv{C=6oAJJoOkqzviPuir}k&VHw7xUs(VCD*4r<KENDJIc8Sa8&xGG{3zfmE7@a+
z`e=E^bAtQ6{!P!nYi{M;AjNV4Y7F~!2e35~8S3EQI2q$^yS>+|{}6@Zp#kY~5(P(Q
zfN*F~r-+)`uVX_~lataDcl9(iy}wlj;<6(SkU%g?aCZLuss|=gbuY=vect`JM@HSL
z^Dbz-xAz=Tjb5@6Gc`RP$k7eD4Ct><FiV}mrC8N+^@$5VDBK^=svv6Df|*J)V*7l{
z2D~SL8tMmf?v=s7TEo$xvaYU@NC__e$1wn~X-_qHD<BO^JLv31T_XzU%<UHEgW5s8
z=8riz$#CSw%zxRtsXuek*v?~zu`yK|1qr~bPVtl50u+Nj1i?#Kn69ie{RdLPxzPlM
z;r?%ZAa6dem#GDXS8jSM^|foUm3=9A6x1b%yL5+5H8eVCF2|)Q4atd$rsP^p>84V=
zKm5%O4+--{MGDoG9fem`cUAQ8pm~$XXg+-Bs=|Va&#gNO+s>K|c1GbAwYHHHsaJ|x
z1e0dP?t;w?h4$2k5xspKr+gCK-0t}>yvD{b%2taP7q|6at1T;wQeVX`ltF220T+UT
z)k*TBk3-^1OH1`?g7W$&CNvhT4;=IqwYGkW00b|fu?*9J<3Mrl1rAbBbn#_%S!SW`
zu1>N;^Jry(A`H!n*sw5O3|)SY={kWTW1J5wMYL+qqA~@<RMF8P2#k(^EOGda23x(C
z-Cx==IA10G=~JS6(#87vs~JFd(Ku>K%<7KAYY>jU+|x5XZRqp9Sq4+KUf0hT(qd=S
zS+s~S=6L$_z<(fVatcz~k&3q}bKfpe4a53cdZ-Q21$QmA*8NGt?S5!YW3UyyB;Lo~
z4oaB;i|Condw1{7)o@4|M<gU97!@ubxOl-&IR=n&|IqPdX2V`&mMR5nGilTe&h`%L
zjh{5$)u)t}UP##T6MU8gz|j$EErq4mV+bg}Lsn8!)BH6O(w^abPLtkjAs0nhLwO0D
zfHWMO<4k$&%S8-x<NncE-L_J83#|)$G{7onhkBB65T>=b4G$j+VARb;8kB$vu}05D
zQ_!q&K4#4pLL@`#a-rpna~CfBgN7-S_3vxYToi#E7p<3EL|l5Vu1DKLZ1f%5x5FE{
z5CX?!48zXAiN+7u;u?GOmy+`d!pAVBvVOd6_DV>Cva&LA>I4+<U}qnOd?dQk*EG}g
z>$E1=W9#!??x*fbb*rF9O7vL0F4YoE&v`6g+41kNN{~}dp2RfYuO7jwrZqk-`%x#v
z-EwgqiSpfuQ*mUo7E$7sx9a@#xnCBxZ&K*FVLlpA!FQmi-iP;8c=b#AEnBwat}pCB
zOW>NFJ(x$d*RF|v`ecZtQWjh-aRldBOTi*uk@=CEfPE2(M~XHbWHA3Uu4w?{7<Ioq
zC3k0c0Dy6ZK~L2e7+7_nRdSo1?D9>1Y*K{NCUWDos(!iVZtcnV(E~n1Cr_VN_bw%;
z==w1}`y5T7!5XDlJo00qe+jyuioyFFYt!D8uRr-BEu`&7gW#z$4x}B}T{M6^6qtQP
z1_Wvcg4^Znv~r~dzAC$!&<M6fL80~mEcL*|zNO{m%NL`3v7bg(r({5+@syO7UVqy9
zc-wQmx#6+u$x93jn0Rg>EiSH&rYbK~9TyHBT+}P4A4{##72%I<X_EevlyGww-n~0&
zT5Z#Pmv~a|-sS3ieXSs(ei;w!SRYkpv#x}Moj&fq`l~Jgw8jt5JVEq~qvZPG?PVrL
z<uFG@0IRyw`gTP20c7+@#JZ%YXc#JCBB8-@Gk!NWf^_B0n?t}PXs&<qT9|CZHgl9h
zN|8~xNnvxprN7nGQZX{K@3#l<pBzM>*WH4`*j$rM3XDVRYX6%>AGXL1<idaC1JZG#
z_yO?f_F=PVMXfcZzSLE8%KQC$d4m^cz8QG9U;O*;w*p15KZ*ai*GHkqG5Fi8D)coI
zqom*H2;11)mQ`fXU-YcB*^Z<>lXb&CEyjH`0?C=Fl~vZ|@=NEwuufg(=qRlDsjkr{
z?22sFMWkU8SOfvou4dhK^V3V_SDLU=n27`@*l0T9U16akvlXeeut2xVdUkNWi8f}`
z`~(4(giW90e(L(7^Q`If3+0&_0Jey3qCeLGpd56jJ8&=9TaSQt+(t&>AynwhR%1Oi
z@!HC{Mz8iEto{p|9LuHYFUPsn+sMnx>SXd~R<coVY;3W#BI%6fUm1`Gdp9i5I7ENO
zqXx61K5)tV(s#{Ov(OQ(evv_ij;R&9xjRjfLJie}JBY^cxpU%Zrl13<L9jVd1vl$?
zJmp&6`yNAOO&?!5$!(urzpFc`fEu%xFEeFiiR0bF0}l-TgGUb^)=PJM?~&EsAKO>a
zJ|COeA=w%@h9H&N))}BuzL!yN^QzLsn}+uXNF5pX>ORV4kvo_R<^~uaLZ2@s<&nk6
z50M_nRd-+*5?(cJx#lC`C;<g5w(Bo`1O^?L|3C*7L8#Nl%cjoH=rf)yaAA9-+QZbc
zwZn8gD42ZUHD`Cbct=Z-KHGV!5_yWeHCf8*>glfgP9^~oQ@{}|sji+{Z*hfXQQe1v
z#GV>7S~4x!VZ$+K_N`M&-1PQMt?$eo&v|W>oB%qXVj8t2P+fEI7b6_5p$+C`HHkjk
z(e;NI>dsG`B+SO$s<W9K=l(mR*a=32#G^j<n@k3+Ith>8&pgi$Gzv&ePv@SuR3Lih
zs0mSlc14%=1B_>~n&bi$m&M-w-9HOT%Eww%j#s(Xx-43Zz5QCh^*f<Ia8seVI`DZ1
z<5W6hLo&UO)8Ai$9&c-KcMN4SYwvdxMMbt!ZG22&e62PJPY~ef6p*X&Hx6w{N>3>5
ze_Ls(6iOZg7r<^(E)vy$AlZ+xJX}ryr;Tfyua*|w)txS1-Scjt$WN{}b$Rk+{&z_c
z%W7&xCzBeU0S?5AEG)HpS1+AAch{41CbF$&^UBMYx>3-Ul}4I`<v3TjeqtGhVvD6?
zIdob7c_49EpmdS42|0N32GOF@WR}$==Eh+*FZie3(&c*(dN!^tFUn2urlrDVdo;w3
zGCj8@!)86zHzDEH<RoS8Vt1L=wi+J<1I+9w2fQOWkPVt;0Lv7&lGA!5?UV-AwO%4|
zOCA(n2^kcHg&Vn>8-nrn{sX&1LX?R=e`o%hcm)xBu`8=}_~BgBm{attSFejwtR`Ai
zzh7_p9T9I4+et%MA!Jy3hO(OEidY<jk58BFSTMAF+CH=HD6F4TuDG=E+CIdFlF$Bq
z>)Es0jo%82#acoWItG(>QLPoUxuy;#Z8k)A85}v1j)CQGC>@s$GGFC?w=z#23nK%W
z)o$2Zf1tGKf504?0HEm9HPsZ%$y4fc=zraJ`N9RsgWOAYZoyH0c?@5Hzd%bu%fK+D
z7i^~SRk$wOgr#*Z=o(hZt5>-J7n*V{f{xMK*F|e&JP6$g;9i#wY>vZ0zcOJQ%DDQW
z{YS<buJuuy2HDXUI;@qo&rLn7h0Y7%fU1YMFRAI_woLAbtMYSxB8w?YOO~KAlp8vJ
zeZ(vy<AN*?4MhztGHbe7P_aMU_Pl&HJVGM0t+$Wt`}p%afkR3;N%|8z40UvFdJS#6
zr?O_LsT7~T?Sz>SW%H;@Q^#f!(fS4S?+*{ld@P47P+bz6O-FH*)TT)~#J8{|aO-a}
zm5QK3ZTRkQrnk;MG%%3JF{K#$k}Rf;bIRG7x68CjasO%7#!>6}vl|+8AY<Zz6DvUY
zuw%8*@EiC)Q<@F4v-JffjeHu2&A!9$UP5O4k*(Lgl>B0^`+Rs%{Ew_D-Y%OVJ}*r(
zGx;o!28Ts143V*-G<~`M)3%?Y161Al(iZHT9B7CMQJlMRqdm!@Eq&yY7yDR-d&8BJ
zJdUrvrJ!pjf4Zl06M9(j0aM@?moJoN-xuww>36((zRzR(>?}hE^t`zNGUoji3_g<)
z#rw7X&?l(RomcSlRvM^@qASlM%FEBEQC{j)P@J>6V`{(=jbw1_tzbxc4%r=Kod|YH
zc=;U5tE&nWEksc{{imo@4TdNg1C+u$i~>~#IN0$|0robg>t?YUI3R>rR9!V=Lhj0}
zV#UwT58-rC#>gqzB<kh89+f+Y1Qk?i!^~M8Ga~CHmSEfc>~Jc<8a;_$6`bq}bHi`r
z@yW*Ef3vyl+~0(0q-r<pTaqTI7wxI2stiS{2iAf8$QoAZO*)E`Q|&dEH1fVVV@+N;
zUwd--1R_!k=;THc>oD;ZA-buxA-YZMGQk$1u~mKF<ZL*Ul|$rHRNo>{(9+e$%+BS@
z8&k4AiUs>1uF^ppxg4S+YHU59sz+Ls=ZSWTgP`RBX93jpM=Yj7)EPlEX&gPy`1Q5F
z>dYZ=1+D^_vUcCYNz!*BAm7|CPy#*_M1FcRJDwAaIVKI)fv<76lbgD%;sC0le$hie
zcctI!Ak=ONc*++eOaLY`I;<p8-zwpMejwmV1c3cs-&neY&c4OM0z318SIfz-?9kwI
zaKHVoEqSTavcul%I0X<nNL(JsXO3$CSW|(9vc8{=3TXiKL+#p6qBceFn9!{WvN=X&
z2?m=t`pYvvIgGoF`v<kyewt3JXO{JSK4ljj_Y#d65x++f-+rU>s@oLLFb@Dnf1oni
z+ux>AGYFh18sG?BRUtf^j$X;}igv>N{fdm2J%zlY!7TYc_z?C)W8HRC@6iz}8<5T2
z33#<S*v|7y$<?CP{Q37BO+}k$+%_3#Xi}`N>Y_1Xl=CpDOt;)UFcxZ*z<mUR2<C<v
zR<%aK+`)0Z>J86-W7GNDKb&a!`Nns!wy5^PAur@=Jx)dPp^huz1TpCK>jJH0J3Lpb
z%K56vyBWn&a5H1FX;V_PFEfzyNiHdU+3>N3Xydyb=TVzu3aOmUvfQW%um}{{ujs^8
zw3CjJv2iq`_q)G@rQ)`P!mpUUQPLk}CpEwV49M%34|#c}5rwviKTyN(g*3XTUYndB
z4G84>sQ9%e*eyx|A&8d_ez>-DS-PdEp`l7Ir4X-ee0?w}&#`ZgJuo7PX8;+q&JR+Y
zA_1){=j)hG!1c*>ZQE9ZZdaT^m#<x`Q<p=Rp;>bs)arPnE^z~80k94OZVu6VIlwJ7
z9t7-(t~3Q0p)f6v>MW;DW@|jIzBQf88Ui<*KOu2Z>VC~_3f4E!#vSmxBAC0vH>GFl
zRwPpO%1u8RV%$J)je)OnEk;#yBUu%gKS30p-*RM-i%kav1$CD7pOTU5Dcr_n*j|0C
zb_7t4n@XhHix<QR*sy!=eW_*f-WR@%?*|Qs9_|xav9_qEu)1<BZWSFJd3(#5`S~X2
zE&Tce{&~3{9UiBzE%!wSY6Wtd$=h*XJFyQj_rBX-$2_dHh=BGD4voxhk~{zUi(+6z
zHz+#?0I{@&f={ShHB+6Xxsu*@zrT)oog?UkUS{=?+<rlwQS$S}n6WNrUju<pJt1rh
zb!yXr0qGl~d=o8~ShMyB?xr!lJnpd<vP8qBZD>SgDzD7)tH3__{3R2&Z_ZIsQJ|2d
zWE({Ysw8(8thS6Tc_tE3YIVXYuwY8IeFK3VYRF{iNe-VFlV&!h292t}P5u@v`xX2c
zSR(THQu5%V1fD2IM%8n_MTw=pca!jz7th+iZ(n0$T$**=Mdt0S-Z`EMAv~c{i8k;G
zXp7`l^|Tl(yqR<Cez0v?6T48d^1ARTyYa5H4!xu*Kp+`To7@p<T(*(_7h7)`Rb|_)
zfr1JmB_f>y3KEjiB_N<khe}FFNQj7ZN_R*%(jeWfv~+hj(n$B2%kSI!>~Y5V<2%MX
zjKzAM`<`=N^NMV_BxHh2Unu6p94kavouKZ5UeIu~{PlJr3)q3E4T1|p{s4!cdKuqD
zLFc7bf<ShxU(OJ{j+WL(ae)C?mB8Ony;DEC?n`%-BYb^IEO<C1d<cBiyxSDE%Aj9X
zkd|g5yo0##zxmw#{++yF2|JX3Y0O$0LA`<3;;kdMCgOb%OoszZVLPYbKghROS5Y#9
z%$F)im_vX&Fty~QuBsX{eEb_c0J!%>>L%<)Aq-s1KzKJM$wgH%=pqHqBM4(^+l%Ib
zdIM%-s#}#^Cj$9=E)Cx%I#6;<2hxZEn67I%Y;UhJ`YiWCc3YRzdbTepwIhB!qj5wd
zv!lpmGRSJftQn|~UCfher;li@6`y<TwS@yzXKYaWkn#A<KIP!nQ2XDuOor<MIBY9-
zc~n%AES~=>04Dx41ui|m+aThvR86wIvr`E+p6#cs9|pd}34Pw!Jb$i9F4xmFNi1kz
z`!dr9!E-D40aP{;Hr-scQXjU{PfjYM7aRF;?+@)aHw7esl<j)f6G)BJH+J}E-z2pG
zpx}I#pBfp1nFXjs(?DSOd958t#yhgqz#-_A26xhHHq-WRgn_N#{o`eS@Z!fwLX4dh
zs6Ht3@;j5R0fOla0TsIv2y3!Njt;g3e;LK>)E%2A@K{I#49-r33C5hmUDv%cc5U1$
zm)F-3U!n#gw+BSNmWPXuJKR<6kk4>c7dlgM@jJ6fb?d;pbx#BjUpyoEK}6j#LwI>9
zp49P7jZ7@p>1Ds1SdSn##E5^(SQelR7NV%5vq^N=Cf+%nx*-)hn5Rw@pD_77EiIaF
zb*(>G!T%Vx1ETtm=;MWLKT#TV+oRq@6>$7$Vqy|N&QAfC&j3&T4as0Hy+)7rkQWcL
z^79)T++FV23vqMXNJZPPY+B@<-z9k(kfj7xL>r?l_s@BFO49?9C<Q8m;ahw0MEd&7
zgl@*^_`YcL7%YQ;0Y*bZ)2(f$^LL5PE`b(Iu)cB_28q%BxJn9XKnD}dmadrn2N6=>
z@mH{4i-K}`GUv|iTMVC)uAJLU%^Tv73@({LDE>m9Ww!JKxuW7XpGz=j_JN46#c{)T
z8Mp3(AqlS2^!BvFE}s;vCcr>^RzXeeMzYpDe4M^Jy+Sq5$a&ZwB!|sy2<&%t4xQ)y
z_|f$BrVE&Vp~Ay3rfSJj2nH|QmmVq7U?A*CsMP>#UHR4Ru_6x9>H#<3+jqAY$BI6s
zrKjh3>TXS*FJxz~$csV@fc%#~xPA`D3p_W7B{4}Q7?2?Xtg-1j<Aw=1T}sD3#e(sb
zDiKO-=E6$%k99-SWPqQPBTH!{8!gTb*itr!vh^UF==@!4h_@BH^Toq>A*XQM38Lz2
zV<t#+S;w?wh(MPNzVe4JIyEI_hW@(@>Fut#;~Np7v=1NRB___STljV^2FopXGuyyl
z2(CIoMz0e1Z|ls|68cJ0;`-i#B?AeB%H0>i#+`bWO-~OPvz)lBEG-B>A->n*aQzXa
zE%=_~1D6JW!C~b{>?}ko9Svh6UFfRWx2e*4>)Y8WxZAQB_E?4&g6)3K?(yAcYHEJf
z@B#J4f!*+5E&w`k*_%1WCnxtAG)n0?!Q&TbV0Kt|0TESbNEy;G`B%aW47hDUp0JaZ
z6QqD}4T{Cq(3m<?Gcz{bW}<k(PV+uioyPZCI)5S<2`vtccye+WhRq&7E#+V7ak>ZR
z+l`}@2wm?;_?Z*y`+C!GV&Xqz^_PUAr?BVqUQN0Vp7<qhRG#$fm-b9<_{*1f!A4Mh
z$O;QdR<_4>B_?Y4vZPNs_;5eSFuNE|CHQ<Mgwx0uXgRSt9F;tGAt53P09f_`^+N30
z@q51`Xwe3TxFaJXe1V-UA}Gr}x3%R?_|7qcRpRrfPrnZS$bsM06Z?YU8k={A*Zut!
z7E8Z{jaRuzN!7bzIVnN1NE@`byW8xBVxG03{5`8BQE(E6knpCb==be7AXi&;>>3?y
z8Ww&S<ePCQDl1#=MpJ=rm7L#M+}OC--qFVTqj!HQCCvy5)|OFEykU{a=#J?<kX{jy
z)z(px)D8^|Y46OCS2}PLe69*uo2^34Uu+c&@+a)gI=2<et;&>+5xMoHAS>$^eCUVv
zm;E7_BI%0rvo6Op)C)QGJsWd<1i;H^0Onbi9{ALH0@e}Az}*_Vwe!=ap{?z1Pfrg7
zz`c->X&wGSh$6U{rLd$1HOl)<#^EQ89Z6G@&J(k)s&H_sqw+R=MjNKHG1C1)R#tg5
zxWtlQ;BbiSkVG<SP{<BT9S#QFtt|K?!NSho@$pQ$vykklce1PS#JFdisOy84;o4~~
z+j}QmUk_G^h|c9ohhyyGk`gHV-ms_SS{DTG>WDYic2^g~8qhG=+3~Iy7Zz&S{%uzc
zS2%`5Z;SII8QshGvVSSR-$JocD0s8{nfL0#l7D+9&{I@_GJK%(hv3zI5_i_B%f%j@
z#nyy=S=WU8&aCq67p2Kawk7J;Z%uJGXwBdMmH79I(r?m0O}R7M^=w|{7^(EecP?A7
zujL+E4A09W_qt2zxwn{v!|4KijDU;)8jX(5mP1Pwl?ZUOrycndDDpk4q1uXZZ^j`h
zXLS<ZTieS+n~;!CcP%W~U^(gjoLc1ksD5qM1t<8v0dx6Px#~_CYyoJl&S%A&iH?`T
zN?09Fh`<4oSXC7QHdQ{^96vKMB3cg5k{{B&JX2Y>DtlYm)1phh4&9U8OnR98jCuZ!
zW^RJAl7%JRq@<NqnSGv+%{E4@><q#ma(CCm+ncVj(VptjBVuqA=1^tVM1`df^lbnB
z6N_F#ZvQ*gl>a@GFfF{k(uo4@3@nU{Eg-uO4L^8BPS(=!{RypHVvvy2*}Y?3L&IP&
z8_|PsgCRTV@5fx8*nP@Z8km;>#2m8I8Nky(ysDrWaaYXtP-YOX_^1;t452u|f+i!5
z;AUL0ZYH*N=5V<F>W?O1^ShJg!c_EskQF|HzvJotJL=7cVC|gfWc@YSS=r~(jSEvB
z<GGL=DbP2984#~C%TH6q^P(HBH8r;ldYxbA-CddRD_ycq^UZc*@R;BO@iCRfREqek
zJDR^v_cL)Q>fb3}LeKZ^(nUl>2;PdCvs3s7+}vvxs#dSW+Ba9b>>`N(enqE>>byhR
z*4M|HXRYPzd{w)QaEh=m(ByT_ow6t?B5LC5z_YIPY8<;vqTghLfxMC5g~xK`VGub6
z-I)*w=xa|Fu0gYm43{ndM+ORVXA@aPlVRCg)`;o%BSu@$r9a~v=A2c?>8P5Ecr%ms
zr5kpo;t+Sid6q!EIkv~xzY3)lPfmz8u95}vRKVCiNKMXYrh<Np2<9yJ23DK2Ty!GL
z*3?FLI7N`QqO0>x{l~9AgKfKma-><8x3S3#MtUu`Ch&7LYsiR+Kdg(VfTgpP6fU$Z
z0YGbAC#v_kEHAeXmxsJJZpEH3tj*~fa%h~%zTY7iyoPdgvX<)kw)#NH@#^%p8@Y2;
z{|Y>%EYC_>4Ju7XN3utF%jn7L>+81e*T}9AiQ$C>p?gqyi8iOlCo4o?x}cwL2a1aa
zjpP+oKrlW!%EzfnKTeZKaCI(=-3g7mcX9AXPtDV%zdzI`pjITj%zS4sYeP0c%H<}I
zqgz+HH}24xLTizhcKdDBXEt{B0dY-mw3+d6Bg*1Ne^<7Sfv8tFX+y)q;M%J9w(74X
z!z6^Q@K;-<PEKE(vMA_7;&3D4t_cr+FFFq%K3@Y#e>TK$l%~!E5Pw-I9xq8szhMk^
zqtUnooEH%A<ZL=qn|Nk6#lyGwTps6?oa_C|MHtJGYHY&Xth1G+^rbmoUk~Fgedevd
zw8ocB63QUpxq0|ip~Cc(Vzgk;Z|NRQ>)*sq$i;>mb^bu1>}1~C++yhk&v4}SY;aq#
zev$&}O?WF{XuW?(2Dtp&pI0WPQzuxU4)ccI1xL1^H6<ehb=IkZgie->DzP9Z2OT!-
ztu6km2P2e8mbqMQ>N4{*QH6ywwaZgo;_NX2=nH*sp~fmR-~+?JYirU)fq#)J;5On%
zAITH`8{kP}+uKHG^g3I4tYq~r_{e{36e-Qm$A;_;Fn;$nk|Yq*?z*}?2aX;;o$=vA
zq_E5B8)WDKB4A5iYz1o@jhxM{m@veTl0AnH`Hy3jd!#VZJ|E%)3|oZWv%>707|15F
zC}v2mz!_fv8d65_1vHTg2mI{f4uB;~LUr{m_VM}gw&Ekoj!k4jf-gQJ0SzN#SZsx_
zMcQPI&F!m`MZ?CIFPWos&X3-Gf}7d++G`WBx_Dc(!0}vsnmT^`TiE>~$J15ix(#-r
z7$GO@^r?DFI&{X@jzLRH&vhNa3cB^`(xJ#|BRKrK$j;2AwxMAgfeW0L@17SI0!->h
z#NeNu%{7Ozo{$Xqqo}@lIfOpm4q}sp2MVMg-~Cm&``G>X_{-oZO$kA{a>_V|AEz5_
zOK3^-x`A=yrQa#kvd}`gP|`co)Ea1l!s|LYHl{cZen0}LR@Z%f+sX!-^#QZ3iLdsE
zi$SWcJzm@!5`N%nOZezf%UHD)M-bT^!owa)m-u=KH8qAvmg@ktt5Mb@UTDCbPxZsH
zHut-ES4|nZ1q)2_Pfe8|^c9bQ<qC=4+O!3ZHV!%Y_+#R<)KnUYK<d%eL-sKlw7b{-
z@K+RCzboJ5cyC}J@6;YnFBemHA^H1^B1;ah#B@B<Cn!jn^kO8+Q0Me-Z}zi0&`+)n
zv=kD*jN6F&C_Twus*zUqdp@Q%w4L<dFM;&tPpt+2xUu-?Hj%7Olyx@qJPK1;Z1$x&
z0f^`e-wYHCukUk~0eM+C+=&*WOp%cUf%QqSE4yx2G3Nan&m7HVMoYkCOAae&5-|G_
z<$aHbx1`tPHSBgK2PYar<Vj$O_Ph!V)4(XtElSHC3xl9G2%K9K8?KFwjiDJ*OOPF_
zp0fm6?Din)EdPQf30uW6^N4ItHiRK6919rr$qO7$-I$qkalCcwOLNT*bIJti|0!lf
zE7(xYO3l0jmfN6(Ba_Pi29>un%H`_kv#`$#)0;Dw{D@+E_z_;>m*f7?qB~{`<jM3G
zRYZ+OeRs8LtPyIwM*xisvA>7U93A~QSEI_~Z_VZqeaM^0$+u8D((gZEVrquAs*8~(
zFDIul^2zMt!Jqrjt6-RY>=4&F#zNFYVAK(wnKhS)Rqh(wa81%$fVhG@F$~qM_>E<g
z(8b34eG#t1Z$V44a0)}i!lGW$=SOBWYa1JqkDjgs>67!L{?+=S$xpaGhN_`ComK5(
zE926`UuD+E$C_pqPQPiZE_!W<?tlqpV&=37zH(RaqLZI>R#QWV7Yq{`eFI_H=wd-m
z@97{>1^=CT^+2V}pnLnZKn2Owy2R&<1gF59uo$qz(H_ouq@3h(`WI#9d|^VFyD#1v
z!GLJcj%H*+df?t*`w$Xp&<ny0Z{E3c91{16k7{CaGHz=h@pQrFS}nl_u6gH^d3EDZ
z$gP)ydGJvOpH&J?yP>}RTCMY!FAs~R%kyY}Ka;K)9`@}y^>>0V5G~PP{nOi<P($N4
zraIV4Bp+=I(ff=sv#_jUU1e7F^>%hX>X<0A<QzMX<FP=0lw9X{dP7$)wTvPxDG36A
z>&?l-?q-K~#5UneTh2TGJRHwzzN72zE|wKwiWnk~XMdJa&_GE2hx=wP3O2@}S@3$S
zl&uVTW5hsnDy4V>CmU#6^2=Dn_#{MJrg#y14Act@vhjUeeO4#C$Wqah`3V^Pz2JDD
z*uZ{$YFMCk^Af63rPDcq!U&+8Qk5<EM=MM3*9CSG_!X2XR~HtHi?4nZna*DM_c);4
zos|@f^1kiT`i<8zG4;$((4qX#)1x<!jSKDe?HQ8a|8%~ot*`%NjTp~QEmyrlW5?zL
zCP}f&nsKLw4m<baE3o^{`SHVt-3+@bR_ekJeSnzev5zp#>lbMByE4+!tVZO}4HI*l
zYmJ^cfQ{7hm&LhXvq5bE#Bxsl73Pv_m>rPr=0@o<r9E)`ar3HeRu~D^QSr_dcn-%O
zNA0((tNAYecG9k^4|o+62rthm!uSEN(3${@y<*CRcg^0ueLDyKmJd4?78h+3`Z%-m
z^D`2MySo$Ei~GIlCk6-Qgxji)88#;?UahjhoC+0-_UttTu7uLGp;sH2nqua^`<YTQ
z+t0N+Q>^bk!XyGsGDP>{a*mc&WO8U$*Erx1PmxTl?ff+F=QRxU_iq4Nbe74}*7;ay
zPbpBKxYb`@kuu18Wne<TDX7eAL!l!Jp{pq4<1u`#RYnj$9nX*?V8^%P*xF~p)or1$
zR*Rl>m#2x-V6L-c`d601BF}N6OnYj8VAMCM^ja?_;fviTI!2w#(1WCm-~pnXnZE~o
z;<cwiLBYX`GML&ymOUBT*!$Hh(Y;)rP#Na?zQcAXUUWW8=VGsorP78)c7shS9ha0V
zH{<N~$3h{?@M|;?u$cyLzVFr5Y8%!2NiIi<%UW7nSk`yD4`sO1&4?A52h^5!rDw*T
zMkB6UQtiJIgQH<WC-Jq2hO~#X$Nl!P#mTO)>DNwe)&T6JCvF*GUvVnG&Q<QS7QNTk
z*WO#WYa8~}coEWFPR=%1#Cfy8wHYoZqSf9cTt{gG161%BPzYObaQu4qG@;hx*Xk#x
z)}tT1Gc|Ad>BY1^yyQy-Oi!st2|hU-4%^*1ArN8P>N6n5lk=_MK1iw=`S3pz0SpGI
z;=fG2DgHj5z$WetZf|P3?{pTz^$X+;;JS~+XSH&?)3&(Q?~?tuurRT?oc>@YqYpW@
zG0C3_+o?Vqs$T7E0#%qB4EbL}utp~v%?3=&KOd}#ghzz7i_l3&Gp)tS6uo0jdjj1V
zC;k*1%Z1D&uC-DW0Vs(PpUTQgQ&$eMS<}c9i2VHg3LTDj)ZFud0{{ti7|K;}YZyw?
znl(TwimesJboJqba?UL^=!Ob3{WCMU<>Xt9+(+EMo2E+Zw@u=n2`i211&|yPak^Am
zG2YnQE8;uTMsdD6b!gCYunf4LVJg?HUjZ(p6nTruirGWPaS!3vfZjUK>9yj(O$OWK
zk`j)c`fmL;#Pp5n#oKfPiJd6mwVb9VIX1<`s~u;^vr8v1n#yfkX-snYI9elTmUknH
zW$*@t%QbehwTui_ncSyOZxU9o;7;26lev?9{W|w#>Ot=?U~_UK=}LSAyTSJ+VSAx`
z%ckBCGQNgPmVh_;c>%boGX{mn;Dsk?Jnym@ef9ea{0dUo$)Xvh(!b$WTaY_c0UH`;
zXA#Kt{S2(55)g-!RlNJ@(#aiq^Y$>wTbd9{;@{!%d4Gj7PfAzjvt>zWLPE=_R(tsX
zXcKd`JiK=ZznFVt_n)Jn3gw1T2);=D3&YTikVo*(tBIGU>Tlo5OLbNADYA|h>4nJZ
z*+5Yg_rLnFH*@`p*E~+?8U+c!VxQpP!Kz@$Ihn3Wd!VH5+TWAVK9>${oR44iqcu`~
z`={|FgO#F^W^h@!|3)%m0QBh|p^fCuG12||(BmXzT>{UFcPp?*YiV;T=tN6TPY(?_
z85#wqCwW<ml|9>DT^ecfL+G(3@q({NbRm-9uYuYE>aV<O)FX`bU<h(HDYh}+ypk*_
zFnQ*qn4)F$MB1();T`f}hYHo^)M;GurK96Tmfb*4f;tL0DKW7KZ$dD%szVOYs{Y-l
z+1UH_wazU(3tnBHAljcTK<L;IlucJuF!On(qJpoeq?Gk{Y>bFO`zc}lGgvFmC=<Vv
zNWFRc3QyUPkR>raoDe2C9sg%gHRt9VJqPVa4FH0AEU9B-v;TCVyQin|@_f(!7((ia
z(v4OPO1MU1^NKKuMe{WQq!{L-D=aG$d-jZOT{F&}8Dx>N#Ig_%p&&bZVN#gjw%r87
zQnkeU_a4b6WWrYk55(425-qt1EMrDv?1d)rz$I>X=jUxqYat<GFJ`@cZznl&aP)Z*
z&dbAtvteZ!c8#{YIey=MnQ?E=LRp?I|EqzLQIL5xy;*19=g^S{-iCi$Ga8lx;etX6
z<K~hR`~%tKVb%2^oGs9@JVz-8TaAELZ9TotlKfmetDqbP`#NT>w>h*hm$eO~o7lFY
zZLvp&o?PtXqhVqaI7-XQ6FQzQk3x8mt+qWS<vS+TVq7o;VgHoy#y8jUj9gWHGWyVg
z(1cDOjfv?uk}EKhnjQ6zx6MufA1E{)CPZ|ch0w#EEQQ(J!^dw|GUNidhc|cde^Cn}
zObLJ2acsdQg;H|%NJ=mUaLQWrSpNdy+cI^eA9o)qt<}kVzxmWtm{5$Y#`-efCTX$l
z&w~hnOi^pR0Xn`n383BKgaxPL?I~At82F6_TSaz?{(CJ|*f`__2l`Z^R%!gCQ1*Fe
z@yb-Pds#`xh@X!QY_DhEoi4RE2^>n6)8|iPJiC2<(=}hS-C}2ocYwLr;aF>kZMtSq
z<Yo))rvXnYvs7uFwn@c*_YkNwl#VkP3(aqSuF~k!$f#<)qg0-`QaDM^$T%EhS~t&o
z>h_dEpi<6c_a`c|CZA;Y@ad{ox8DEv?s0UCe=z^Xo-g6iWM}6E9_NJH)LsM20~5JB
zFDn6u_yKurXa$yXP1G=2WnW`POzSSaVBb)*wvHSzoq$nP(BWG{U%uwzJKN73axc>r
zYp<_X`2yoN*4KRuha!E`*m!tD6*hKSX7S0of=IK9(;K@#Ls}XR*x>tf*SxqHyOUb}
zn(8c8V?INgc5vfj^w)R^-L0+64@A?heMnA7yZgPf(D`$cxcu;))zp~s*~-d#(SW)N
zZ7E{-UATyKt2vqxYQAc3zx%vaj`-2k;t}WRsa<n9oOvymOU;DwBs@Qoz+>6l46K<~
z7)Z=o0yIWHH%-|YvADy?kjBQx6?z{iSKb-I=&W?(68?!K(uRI7lK7^OI6oyZ@sjOy
zh774OCDpipWk-O+v2J$NvrnJUGBq7wWB<+aNs~TvwG9gax_F=~-;2zSsj0P1aScz2
z&!1C9EFv)8gz8BLOkaP(&*0?bthC#&PTqf4^;x8k%$2_tV23+gx*&nfaAVjVQF16w
z1QE(}l&0<%a*L(J7URbO(}`qc6N(+7VC;uh|FgOI-2NPu+0zr{F$)V};X5G}a5}}W
zYunS;{JXomWLHr?RI{wqXiPd<iTnXFEbJ17p!_Z>tS-IO+4!(M(Go&zg4Le>$`EBM
zQ+`Okr^;-SZ{6vmSnfE9JJh;}tzgm+iTf~pI$8?q^`@U-4!~;U@!AwrdF56yp%ZrG
zBtb^g8Lc;O=zg!&RISDbwveq@b+aXzp<7tkVAAfCmZj?xO|ZNEwYWH;64ffRKU7SS
zW8*#zmOr^6`M07|w8v)Apz_d~!*NjNgSuCwe<>=j0NfH-2&lBx`?!56uv<Z{y0EY?
zdE)AHzp-A`%+eVFRXucE%uGnA%d*_vD(Izhy9<pW$dzvg3kyZ4*>t>Thq3hm=y%BH
z68Q}+0a6D}t|!=nY}AcZT7>O(Fq$hK=gSXK!?#vc#D-|PArLIf;#XtijlqoW=IhJZ
zMu}nGce^&4M>G>7nW8-=vOAgq3E|%h3+K3r^K)~X0eATuR8m%k4h=cR(dMc9*%PMR
z%yHT={r}VGh}}2fKM0ZRw?<<Pq719x{%})6ON;jH>>Gg9VmV*kiSzw=JtMZMhhA4f
z|HU<9cU2cHv$z-+%CP-0BMVFBQXB<^7Y5SWf@pc&iS2y(>pOQ!pTyVHTwPVuA7OZv
zqAa`;VjP-bWn^@(mM}5;cZs~<=PNpl3Qv0{`A$<)<_}+G^(h1wbx0(ejIyq4#ER&@
zdi5%Mhl(c}d!z#^GA=q=yU+gr41Ej^nA>D*f`T#-Yy+yKxGf%?j-w$mYktvlmHKDi
z_wJ1zPyokG%=Fbm+<&uJ>|hWGBH@R&Z2hK!?A~Cs1wAF&1Q-+f7=B%&<yj2O#-T|L
zYk!}WolOOvv$i4F{Lrd{2PqZaL&(#GwQ>_IJYbDS4w)}6UcP*;yWk|!QySO+36;pm
z?+vImdsKCF>K=<UdtzLu7DDl6)${U`Uw=x(+qwK1)@Bc$Ji&*P9`fy*5o=2r*XGts
z_u1S{>4r9g_i1H*JM3IsBp^Sd?tp>JSEoq=@zDSL`S9YUoojRREveA4x0N@NQmE%=
zzX7HUIZAnX9~)S>Ej^`a??>FL2lZfPO2CF~bUc%+QO=LcN{d@>ot=@Rg)TodtgaZO
zn@>jKbv=KsA!78H{s0SY&F8MLMgUCsX_=YeS56FdIwUld_V;On##w>)VH~rO@W;tT
z%h$(y-`!tkWS~<9!yF>@%Kwf|4$h)GM0Xij_?b&xLhu-LAtK*xv*dqT(veuMgtURN
z<ULWNk1Hu29=4U$)%O~7ni}n4$tY3R-K_zHXDQ+v(Yig2gr$wc!&p^S<IjoTd~Z;(
zU8Ckux<3E(<%>s2iGP-%@?*T;D*+Cz+b)$i&Wei_6=uIlzs?)2^8Vq9x1jywCBWDP
zH>ARjwl1@(!lLc}?j0_ZvGnM)k8SyqM&CdJ;Dz>t1k&J?XJM&o6+~B6#T&S8;~}Kv
z6j$(QB{wLjXGln+Mc&ytKg%Wzf=LHy1?_IegCL|eRZ3GcLA$AKU_iHLs<EFbiJn90
z<ZXOtsNYN-rNN!j;$k5Gps*domMD)cfLM$#6=vx5@NNqZ=eCxX-TV(QW-W01zE9Kp
zySux;#$b_ycAi9P?IXtr*e8zXTFQcBN&kM|-@oiyRe4q28?k!OylhYVbBtA;;Oc(5
zNwS_lNs`c-yh3|@k8c|-f)HrZI96+GYwrusje@M+D@{axU#89z!S01SN6AGR@{DVA
z|F(MZ%4~#ilhh=BY3SyfWqpS~Q$C1z-CNUga{L(X5B4HI144B+TQZw;($!P2#gGn%
z=?OZ~`xWN1X-82~>Cvq7cVJdYEDW`~*vo#*)HO;XU#?z3K_q;2XFahuo;OIZ4SO$N
z4&0dC!PB{^wN*kB9IkLyy6jM4qe6HX56!!P)!Kt~GRF=2nA{H2S;XL_R{~Q+UC=a~
zNLFCV>yk5uzF>u2Cz-Ibj}^s#wlDvdFs$m)TR0`;Hv$&hn#+iB_qC8NkHj<j97xq~
zqY=#}b#`=+%*<?wS8(f<>sw|N7CzgpA08g|U?Dx$<Rb8WE?PI3uh}%WGh5WZIyCx@
zyT!Soul$*YQz4vP{r&KyD2z96MqdvH#dc;khFE`T%@K~tjqU5LFp->8f$<^Puy<yC
zOE%$#?`%SR{2eD*SQh|7f;PKvy`}NkfjGYoNF`|^8x0}l3K@lqhlhumxYmDClOF{4
zi4fOZb3_QDR`fo3{QLfJMip1p3ae~%^*_|9?^s<+OJZ!ZWBId)C9RNyIfMjJ^Srkl
zX9M~Js=Lm1A(AUhn!_~8(Hd{w+)h_~$@Hs*xmD&XQJYrs3>CyIitAB{vCP?Qonb*%
z1(ymlWNPiqB41sRvwktEQ%n;ovBA#Qs&fVOnn=1&&~)svt~yMTBYC81$CSLEnGEM+
zvWIcXQc}nu1GojMO4ckQ!541`MMOjsDd0K@NyO{mKp9+3ZooWCdT<FF461<K4NuZ4
z>KQ}cVOe!*@M;r#`_^3a)0itP(F6np`YX&`tkfSv&6k$O13#r6lP^zheIzJMNx7lW
z2KE8J+S=Z%3TYVb3=H794@1xv|FAU-J6P7v`JxRFNCw8;CI_dLF~qvMDIt-O=rAG<
z)yvAte)_!byFE>bO8uCTQCxT7CLrxZ;F|UGp5@w4k~uyxW3hL0KxlZ-HHz9&t|~K+
z&wZ}0x6}O=E$`>IZ@P)cX2^5j-9%`ANT{mP_ved=Ip6?n6ywjp$Ve5|jzdZsNSA1<
zs7XOYB&y*ZSM```zFuVGSyp3GFOoRJqx0LZUNK624^3hbAXR{ye`e2MC~J>M$T56v
zbqXjK0Kv<QT=Vc(m?-kIFfn-)6nym7ASA4y)dW#*)aTv##%{+aPkqV$hYMh&qtl;e
zKM;}k4VNrBS<r%`9NB09;(SnUCj?1VRjIo5C~3(iilr;=9f>>sUS@x*`o~&+@u*kV
zopN=luXlcVxf?NKV|t<L-uR417**<H*g>Gv)ozFevyn(wLtvS~eRtR`!jnmneiJDP
z!ZPSrE!#N^WuJCxbWFpQay!J|F^PC><cV~zW5`oQmB+^7#19P&H<HeYY7!A#hjo%O
z*l#1aCWpCnaV}b;Wc%Y8c@37B*39{s@X?4b>bqZF>8)9KPoh4;ZEAOl(<2`bFV}xj
z^}-~yiNh}S!+J0RIaj!jp5j{$Y|W=*(^GB|B&{}st5ia7-g3cY^0h`G$h+UFGtOl9
z0fqu_Q~G=CcaD4a<{i_06|<W|Y36-=eH$A+DRF*+A}xs<Dfu~dL#-W){4%`L1LLa_
z;?trUQ{+rqwQhx%Yoq2kp#7wt@QpIpWI`3njLgX~E^*q?-Acn0*CZFD1BL4|KrBSs
zc4q3ZcIqm89`EmO{o=z$K)L^Id7?SHtbN9@kz4oljB~IGng6rE#bK=%j!H@rF3|K9
zf&t2NclR<_Bk6G~VP18$AKH|`V-EC>#mY!v9s4G%CtEIY67L*EZ1M(}vVU4v)kyi(
zm5b@|1<OojE33+p0rP_-omZ{E{NWn~1rhKNIU+k;w0(FFsSj48*4EbR<@h906PYtV
z-%*~ha&RQPcn(qxzv$?!>%c%QW!LhPleYlg{AXx7A5q^?(klruUyd`6jLE&`@D%h?
zW=LOAT3DnA-$N}i?XhSa+REnLw1(1@N5#PFE9H6Cj!{JZk(poO-%s5|PXFTus(b&$
zJfHP?N)d5|jBoVj&>;q`;;-K-ACVAWm*erY@$dKSb*qr(?GYTz0*rY7^jD)P5M6<4
zmoMV}+w+5|Y3XY^14tV@Ilqmge^#tbDeR2qa#{8&q$x8m?}?jR^&D{VTuu%K^-()z
zZ|+KdBh)*<eD;IN=9MU{wp#pJ+~RxF73skVht2*#?``pWd{}@?WSLA%e8bKGRcK1k
zY9~)`dN#Id^<1aKBU%oxdcG9{M<WKaiN4koQf_B4p6BZjQF{kid@Ue%@Pd#pjL68>
zwdXNn*C<1bww`?9qa!2h(`}vp*qaYVbP^^jeC{0S8;47!&;7y|J%5&8l5228Eh#BU
zjUnwWN+&FQ7rmwFcyUwOfQQ|Bg}U36Rwkij_fB;SLq{OzjL}FP{TU^H4VTP%oacMv
zMF!^g)cA!`=~qX+<a)7wfW*x?$@C{yUM5mO-!j5MnSJl1jy|y5VD20h7y#l4?s6iH
z$2~-tP6&8v5(r5}QaYt1%|w#JBO`E{aqpkxfebywv60Axi_OFHFeSkAOS^+aFhy^S
z+#Bc?(^Xd#HE6;+I;0d<?|<8L-8g^=hH;%_MQC-%3rCOMGJ2G=&2dCyPN?Rs7#&r#
z|3w?oqO4}Z-ut?h6PY+E<^hs_fa}4T9)i^I6faL<#)zRVB-&ZcNPFe%)bbILmv_4t
zQGoYu`}AbF6`mFLwnjD^duAI&+=~bxmW%gA$A*S_ft|U6o&oGJ?ey8FEanH&_ua@G
zVK9Y}f>A~2!#CR+?Cp#0nfk!2MRKxu+Z8c=gY%h|v6sZSLNSUO8Ub^QmX;;iRjK|z
z7&mzS)p|II0k4t5?y{+I{O2fo9qTPrAop;N@pF03Oe*s|Q#!HaL?tCXmn@dUOO+(h
z4eld4aa@Y^OHEDfU+;p-URtN)nRT9>%Ve&ywWe^8{g{zs)8;o}v>eCUJEKw7najn+
zMW4SPrzue14q{%Y&)N_Y4{`PN{j1()m?I-xv|HEGI>8Nu(yFGH^brgt6m&4P#&&+p
z%#auZI%QD>fn&U@`I$nAp6LhHaU8flo>E34hzF>t`cx5q8`V|*AIwA}p>{eRjXR)W
zVKw>O)0^Aa=&ivSZSLs6MR3lnw=b|lL+=GT(*gj*pmqt1%(87^P$KEp<mb!E6Kuj)
zOGUlFhl)kwhkVoPS5s41hjMdEd;1+q=Srd<ubrsW6dHei$|O8HIy$1BboCrBmjiZ6
z!#QkZwYMggjb>*EL6-s{xgz!)l`!fc=!-yF8mn`N%W{Bxa}W9Frga-8jEAESP>3}i
zsVL1U5sZzO-3!MTp>(|Q4c1`LUUHqqI}(3}1sr0F4%-h1{VQ6VspE#AiOkU$VOCZm
zaAZNG#CC0XjKyC@70uO~V_@uA)IcJ6w)va_H7%`T!q>YGN(e1D2&d~DBrjbgBp5>L
z!0uH3xuoP@1Hc(}^2dc-R8&xUZE1R5N|?T;w%l@AUpMx(p?jUhh#!)XpOO;)`^Cx<
z6SKT`{oY+9V-x(Lcv&B0zrKA=8;5V5?ar`0rQ+mFf4TMJ(Sd{Gtn1jRJK*MWak)tD
z{mOhc*csv6h)2^{akU&KM`Y4X8y-qSNmCAy=cOdRfbKAarRM+JPg~q9_TlWnp|+ee
z;2x^jUZ!r=spDOZf07_+CDh5%#2U0-#M$8z(4BfAQ(?_pt5dH+YmSEz#?5Z0cQa4q
z-w8T8dQQp*`)|0|?(k{-zKH4n5^d_U_ZU11#3H~HPBu-zi;NDGJL0pFpFTb2%>3yh
zthKvm*h2<JJ7T`YU}QFTv=#SU6;}0G5C<(tb;1XjJYw`*q6)OQ1ykqO9}*9EZ+n-+
ztyrH5Ybu2vi44boWzJWcmgdG|fAY4k_H=aJr>MuO|8u4=B{p2!y@>)wZo>Z8hw3u=
z<lu=$g0T|o|9hsmb<L_MtWGY}l@!0led)Qls3q9Hm`aYELee>7ecq>H>2|72v=Rqm
zWNNoat1XfY?9EB42d-lk4V0X;w73uvt#D0%hnH*NXtO|ayfe$O!N=-JZvJWwahMb|
zHL)V3#JiB2X&G16bGpppS*;z6Kh`9ykl&0U*L&p#mklOr)0cleuX}&vCyRSgoG~Wv
z+pP#za0v-hdp1o?O#Gn<@6T3Zy}0CuJ~G(mJ0H+6fCYg|u3z`HKa~z=5+5HQs8xg2
z*K-X`zFYh@DdO)P<mVPzN-Ayln2>(8w-bN;+ORgphU4r^KDRZUs3`OzU9l_n5Yzd>
z!YOQ)@*R$djSUNuf*awLhBvFy1Lfa?^>x8(mawVS1_s6uB6mmf%O;VBD>nK3#%k{m
z>5WMnBnaO5IyGh5FbYXsuKt~3R2gGT%%UFhFbx7bt&gX*MSI7!cWi2K@Rc(88oU|z
z(K9=vdKWjx!z4b)0mT-Up~28pAgz~h-9kl874w$eJv?0OemVdfRv^>`!lErs<yxQV
z@4jW0^Y57%t#EfY1NEVi>r#W0czxJ~1i^Cg0Z%2P0tG3lOeu|w_Y}mGQ1S8Me*d1f
zkdpjhHkW)B==AhD)p2o|bBnN`KS0l<p)vn8Q;*erw)L6A0wxvuCr`fS<wa#(#ZO+N
z+0n}NdXIi0_!H9Et(9sP(7#E^!7;ekba%Eq_9#5=l|d~G;=p-{lT7)!z^C@1{1Mge
zR#IpvI;t2GkaS?vf-yV^zD<oVS3qXE>wP+Gj&v+{9RnU--qh04=Y93yjv}CEUfw=x
zS`FATGC<7F$AOYox;+cJ`3@e@H?8J?*!}%$d2itGyHfpI8WpNVmygWErLU+%ebngA
zz?Akpejk8)G<5WPRso8tqtx~7l6DZptOLkH<G?_Nk;%%)!)rFK?y4Zuk7_w&GvTug
zVcdS+h`zMw>j<^^({!yDzwMi+r^PazqvM4gO2nzcu-J$s#379sTDwnVI3<aP2L~DP
zf+fZ5&u4FQ|IQsdg}#ld_hd_CtBt%90ewjMiED!8q7PBcM5zVNWi0}^K>7tqmp<RV
zqTKpITMjk>T}O5PWnt`_6Az+d)w5s*>&!sg?E0UslU4dI6g;9Q7zX?gd#ru@zh6Yh
z8sE&t_zy;ZD`2NLA}lNrTHap+it&lp+tWk|KmB==qN46@L_ZG+6Qe7fDlsHYKR3$*
z%0a49=ChQ$cw#0)QS3>68J4gZ#w6o;TQ?n&+uqX?)aR6zA%vL{nUo~?(C+h>FN%{_
z7MC7+y42lgr!qQi4l7+R`;SNg6hRb0{a~svmHS(MCT}t@V2*y+^0dvO5f3`bE$i6(
z25rCJiy@};K5BPum0$3~Ji%bY(5d&-*V4+L)6-`sURc<Ez`Pw~uLC!~Tvx*RjqkS#
zi;6^G+1K3G=I2b2t?UQXI2`>q1zLU8KMPp$UhrCG?5P$4zV~T=#mb5c1N?Rai1vtR
zWgXqdSXf!n6thd)Wm90e*Wn0iTILg5bMr;UTkGpaZN`LzZ{8akt_zm4AtP0d%1YV0
z0vVy1-vzkMcf`z*U|M?$K8ExsQ{v*D9*w`pRW&}<mzy0LM)mggioN(P)(|unaDX+d
zdNX#s7nq}uTVkW$I6#f!TA!NQj{>B{Pg98@31-!hurTpkD~`Z^h4Cq1%=~vqs2hG`
z#@f#Sb-L2RVIb4)nXNUASCJQ)Wod^#@tjaYfu8TqP4|!xdv6Vw>!5Y^Dh*j8VYs*&
z@5>2f&wTuZH_x~Cm-ix;ROVg=#=S9cn$bPpo{e)%LZDnd#j>&s;ZLTtI~>7~57#L&
zFE3$kt_s)pdB~u-mKJmM7rQZRP0eX_6^Df*1)#J7);yOGRmxQ<yXfepP`&D1DrRF~
zKud&K1l{HXHa3yGP4i^ubBl+x`GyhA+R^ufgq+<1Z8xxl+sl%P9#yf8m}<bSBi?=+
z!3@*8W^1;Vkl=$+Io6E11*?Y+v<P~7O>tkpfd<zcdFQLvpw%YPi(5nko&^OiCB3{f
z)cMf4sQtL0rCdH`dN&Ei&d&`pcIODH-@ndNz0xy{bs!&)FTKTE%j@_<dgd|qKd2m4
z&A+zD?oiZm|27M3Lf|u*Dj3~@+S!nN&d~j!9{5?iM@RSGbF+P#lh0w|<a{}F2s1;P
zVs=B4f3Mfq-k7RvxXfQX#BJE%M*<W!#qA-4WfH+<)bC)LDf=~?!}9g(YSnt1B5Or2
zT0mR@<?vyDH;WCwm!Q^bbt1(#l=C0-@^2j6_e9joNR$$CTtoge|BMs1ey(4MDFp@H
z-oKUY&Gj~rkQdK^*Q}xoJad_={7P$~sfSOh=P*j!`>>OO<0~q9Y3?J1n3(H;ty9NH
zSLcsI6r}e;_%d{SXSDwr_aMDZxi}RTAvlu&n8R+6cI6uA+s!AbirHYWV7@XNvA1O#
zOm^C~c`mFpt_KO?IQzHRoR>w9%(nl34&t0-M~*9ecr}8ao-G7<#%LDUcj5c*wX_xq
z*@1$>##T{eu}HFB(aP5hq~Bn=jRDoXbBH5PL=cO_3=FCp*57=WpBu`isYPwp<-q(v
zC=`x62^0bxM^jiK2F|pecs$TZkKnp-Qw-Bt7#Os`UE~FBn$PE=j!-u@fu4#brr*fu
zNH=cqp|j_&I==&q4RliX9fK`b1l$XL&Lm%{!+5t>BmG*&^mvP3ez(fZ%&f?G*rxgP
z{FpNBu+C-;=RuD1*4Ebi+FI7tqCq*K7*Ktj&$lGg(nDjcJ$PDTim%yer#6|9SZ#OF
z8rsfJP84F~F~{GO;{g-L2Z7W<Rt_><rnebXG|#b2xSMfWtE;O;s6&7C7ThdKsxoB0
zvF`aN*2BXC-5PIwrY^I6dvNUXF84{1yZcQ6f!bTnuj+>c#9v&q03vCzfG08vsr8Pj
z`S6h*+sdL1@q-33Y;04k^`o5Q4ae?W>oYiW4-$L(`-@r*zzG9oh)lBU5+MT`%g@gK
zDyq;#AR8c21jMGuP~Qe4s!umt*HVDA+iVTRKP=xYfOGQK*Cw9*t;cyUiC{g}I2!eo
zwLfBS63>#pzN!nF8I)c<kK9+MBfhZ>9$)(F>sTTlO_M=q8iOc!EKNl8Cnt!j^luJ)
z#Si#G6kkPL6U9kh#&Oy3*4q6$Wd#3D+1XW@)o;=`B^G5Bm6s?UAaVDZTdetVN8ewR
zrU9<=RxwEOk&U>s^`o+wC_>6J>#>Dionm&{nG`p-#T_w0!8-als(S5W4b{-+)b|qN
zhgw<!?G4x(u94<I!K17S+P+)l{Mtz5jx3;~`0rs`X>dQGZD+l>;FI6VsjLjKf*6PY
zU@j7jU;mvl=t|*~JtX+<EUiJR4c31O)ra6|gnNVwp@WnQHvhY=j-q<Z^zhJ-fPla)
z-|WMOM`{@z$xchq;}cj3jE+e81Py7-mCW}Y><xNGL|Fa6MEdQ>5R2ds(N9amhLh89
zjy7TCqs<>&sne#F)zuH=QQas?V|(QuSG~$dL{mj|Kq+KEj^Ijk{2VkMd_TiTZe^)=
zdP?s>iQZEd#AT$-8hiWIYZUka`invTWeefE7IVLn?2i-J^-)zK6J#V3frQO3N(6Zn
zRCVJeFk~dl58;lNc%si#1rV`Cj>*1yC9a~9KH|xefO7t=XaD@v>X*8Com@Eh=!lwI
zZv$CacdGJbI1X4+6}0aZCO=5}EsBs8fXmE$E7o*t8xYiqz$>GF@~wr%J(ZEnUZkn2
z`+577@aCiFze5m~<`x%U)$U`FzTOa!V2%Px@qJ`u@?m|mNk2;u7y^?!GGr6J&brK|
z9FGCr8~;n-+S&^Q`meJo;B=+|q~Ppi^BP0B0b4=gq%YL|{x$9hPo@e@4GkQEk^4ZB
zw(k{w|NBJ;8b2qe_~rHGxy?P23C+5#m6af{BbxeIAk6O%$PZ9}v&&dwo_;_Fg?RE+
z9uTZ4ol50*?DX_f=Xb9A?kJY@vUy*1M#J_eIW6s0PtRTQ8PGnsyIfzY%V*TXGC@gS
zw^+NBKv$QV&2+3O`6gh&_8f%B&pv;q24BG8S%ViZ9)m_|_~#F0hKF=?v6uVcRe-CS
z3%g=AaAN_*m+Y#=>(?Vh90s*;%A+suA}uZT>0N;?rbxf@7<J=%XWBoN9RrJ)oeb1h
zVzgm@$R^u@T{QYQadEdf?PbSUuZ(+yVINkg(?nA8K`tT!KcsWnqfzJVAQSE_Lbq-6
z^`SpR;C;DP)Jo>#Qz`0*AhUx=fpoI`GWYl`NFV;;Vj9cb?o^TB841qubVx|h8;k1d
z-T=h1i@~dbl>_xIg;%O%6a6A8Gq}?|KYEV@qaJNJ0?YOL>4F4gE}vo$2AWJK#Wes#
zfUTfV5o^U95hY1VBXBhKFrME=s-WcjWG@&ahrde03${q26bswiUz3xWhxRRExOY4W
z*j7#31v>Usg@{{Sk=;LmA`7fV`y4JH!otVQGbJ*_snp;!xX5nk=LgHErnshxj-|i_
z9RxshOD(vzf9x>r=ewMTBghGSD6pcFDKPz^MKSXA33?2i3sycrGaxmY`5*TaT(}El
z?WDD}S?`e%A%QI_>GJ#6Dk|bUEYO-$KYfY`Vjs64N={=YmDd{2C*2{X5?9ahvS_i;
zW(Qkj^v_J)?MIV+n66CW@MrM|3GZ!i-@Pk$a%%MqEQ&`K5ex#^O=ttrXH1#@t+nA<
z&j~>t(l)zfedhS~EsL$Kt>V|9(`f!<yF|OcX8(u1mxo46smrQ{+GUN_e7RnNpvT-#
z!rC3m<|uMF=Bn%6`twI-%^dlGpkUw_0&>Fp2RRYDfix>87tB215ohdILV9vV)|};v
zC|D7IJKXbQ6D+4mm#h72pJMZR)t+<g?tAs;@jMneTEePGwikOJ@`~%&pdU|FW(bXn
z!hqrG4yKq`P1Ed88n$u^CvQF7k9rfOG3#4B3GQ<X3sRf+DP7t&lV(9v^CTUC>`F*?
znE?_=-Qh9Tg^G%L-;&XioKCtwF?RA}W|g*efHYS#VxDmRr+`6iVtv~BRsKccQz0O7
z%id9_MEp^Yi)T(Nlph~je$1et8ZUW-dxz=COA)H1l2@0a1F{=-WaQ-8e0>pCpu@gW
zUWo^>+*<8uE|c2J2M_g--`FW%2dJWcz{r%NOzi;0A~ruie}a{e%Zxv2yBdfLGi@mI
z_vMeb1+D5|VPIegTpn1u<@cJo!(iujt9R;b-hiiXbOq!tUVvGwR~-zuA?li;Zca{4
z%8f^S{QP<+pDz7M?Dn<NZt;)ihq|337~5?!NkVVTy;$M#OGoeCQg{uhIa&(Px1JHt
zW2l77fEvp<E{f%y{B=@ntaKT8d1)ih>Zm7d74x36D1F*|%cFAC#lf<%b=w{^RgW__
z&Ksp+;~u?K{|MK2oM$*Q?V*C`FevWsPugtvAwSjAYcB>fhkKLb<EjQppv?rIS*Zw_
zcplHQ@=A~{&ZeP@fXEUF2j9xSqaKQN${U?Npb9ovmi_(v`MJ3GH-EEiJizEYVuLy7
zmWL_8yV-ND8Ul-wi!(8a*)`-}m%wbUaNJ-RPW7*oo;2O^Wkj>Kw9F(cKQRK;BtU*W
zr{$^YU3>tap#!8bq@neWw5+J80U_U6cDb&Ld(uNBvvRU0#^Zc}Gvji7U9>5K>2+^p
zDi%yIG89alV6p<c`#)1{KnLM4=sSlUp4%9LREG?ktb~04OWG9vG78zr-n@DH+vkL}
zwMqNcRS;;jzh_TNd#I#$s240VWcLv?&7iT8-F3Ko_d1S2y>JdIZ@kXTY^(6oytjwQ
z8_Ql^b&hV%B>c&pXi+aJ=#^Zq{FT|!nSrd3wo(VMRdD!4Tl8X2>Xi(41=$SQBq=as
z$p485lMnx?2(gZHWoCY7E+)V^O>p`Kuw8*b7tUpYfxN8Q*w`3}S%7vi6>8H3T)E2f
zW~8K~wWli%YUej#Ro)TmAxF@(rCyqs0Gj8l;?+cTSFpN8j~zVT;Pzn%_N#vx(bCdy
z(g)5DKW-9jz<%H!n9{SWB!=J=sAQy@nIgFYu%e_7%Tw(5`1rDp1On!Zkm52>h79rj
z9C-AD{pcSFkLl#b5kx&+|4EPxAmfdU^?w{8^;}{`JK=v9NBtezf2mMY_gE*XNGuEg
zd!u{;Kg7fGoA8A*z1>As={clg|9@|j8$v%DEEW^{>;l5VIJ~epWWR|x%?4Ga%8g$4
z3ZG{=Z)Im1V60y!+8bjdUip4qw`=5Q&<BI?Giwil!tw?0A00LHeWy{=cQ9!e!Uyjn
zgTeC3_E0`6blRme$2(CFLLslInLcxLa3Jc9{l3m}i?HjS()b?94ZUNRjKVgbfPiOq
zcEl=C1wXH_b8~a;g2B&JSj%o%rX)M_jH|KW2dB6LyXSOJ)qvs_5!~_rf#{<D3(>vE
z`Jq3wkoSsky0t*VQxqCMU_jEGA=q;Wgqn(K+SY|q&|V<X;Ult2&+5bYcxef)<K5kd
z?A&{7I*oY73Y~!r!oZn>?H%qrr!o>S?UO{%6!$SHWziqu`>7?Uey>uEg~}@r?b5y$
zknbMT^#lI)0Ho?YXNZ1F;kA;IJ5&hwQcn;&EiJvjuWxOA^tRN9zP5Hk>3nixVm`q}
zNaDq4pG28TKF0)DnQMRekiJip{~17}xoI2W70w)M3yT)IBuDx&<lwkHG5FuZZ)OMn
z)vo2-#Aw@h%5h4MjX(VvP+gzGAar&GmFIrBJDe`Pvjg6g^>ZM=E006*C`EsO&}y5{
z_^%EBxO+JBahA3O=-Uwrv#~H#fHk#W5IO(;j9e7+ciWA;yICf)^-f{yNwP__C2738
zyz>zEKKKVuK&SCOkP}%C&0fD2!mHlbm$%)nLgBkfSpH$r6<%aZ4>n?hL6;b}IPL-^
z(OOs6AP^)zs+~=N#b^MrB^w;TA#;A~3*+X!!dM%!fz>5*bb#;E@%9f7Y0j)au23gy
zS)}<INbn<pHabJROQpDkgI=cunl+&_qdSi_Z>@VCn%C~VJJ_BcUD|1XdnwnX;o5sL
ze>ggueinm@(7D15jdMsgKYyOZHVR8iFjpf+ECqoy+B7&w3TMB$)~<IEzFaQ^zs-b<
zr!eYlTlhqq4PMP5dqf)!86VeKyo5Gnh=w7OSrf5P1QLG)h;g6VIe;@e=CZ&g+}hv=
zsGt^X@%eKrEcGM;Egf4QuXMGCeThuxo;hKW2wv$87>8Mi;K`X^M~D5jvp|6u=y5<J
z;627!A^loBa1}m{=};LEQv%<-)BNoqNJnSrc(E5X^i~157y7kuC3eruP!!Zx<8($9
zv~)yl?5)J@C`pjRfB}0OnhxMkWF1yR^V|=FNm!=0nk#juBWWYl7UL&-a&vz&lNL28
zJv|SX657_>dbK4OA{Gz^2^cK3ej@H(jerJ;iq$}6SB33odNavyvh{4vpy|o3|KS4Y
z<(!)8y?5%SYC=O_cLS5DcpFVXSP+{3uEa~s!^!2&RSJ6O%GwenPvf}C$g~Lm1DQO1
z7hPMFhyXD`l@`XG2$a=Weuyo-cYV1-t(D0MH>Bg=J9VuejISrtUp<D1k5`U|!z7NE
zhp4a$@||cK9i;@z4SM+c-6I%BH>|S2yfe?c&cQ}rAE4Q{aM?5XBmk?UK&w70%g2U!
zYlqVHc=j6eRa8FsKg`a<4W)2S#``&hp`@_zR~w~^Cs5P&dV+yN!V1H_vFzQU+ZFx+
z0m&Tz2q`$RBh?-Zm_&ov=XFg6{LcB*;QA#iGyy9=3dX}gtY=Ph7BX}tXS|+|W}MGy
z7!-0663De2w#<0=`IR;@F3+#idY(Lgt-pzoyLG(v@V=HAF9g4Iz4mV^wLO=B4k13V
zbm9fx;iT~O=AcPU%m2cwKsYe*0y1=S{6FE_tv)UaxTWAQCl6}@_<M7wcK_a^QJ{&Z
zA3OnCQJm;)BL<iJ3`H$1*>)+Ic}i(}(eC{53KqU<oV%0e(ZSx0RaAXdTT9llT?efa
z=(ol5zOFGbG3`#6?8y5{RUSz^`FiuV5%1AbyPQsIKvnHIlq4MZXF?my=(@7&%J7o>
zVo3&$GAvgg)QKp`h<`bFl5=-(Gj)5WuE{||QIUEt0m$iD6%kVU{&({A(fPH+v^TGM
z@s5a)Tx#9mB3Ufyjno}TqesKW{t8QZ#F7ABaGxs6B*I~D;*vy<HRHhP!~nAjy`ECM
z|1SHbeIFr~{S8K&)cpUdxfSg7%Pi##3`mYP$Mdi1YHQ<h`uO?ybp8yOgT26APf_IL
znUHXnFj1gmlfhRE))%%wTn7X+5bj&(%NyXpgX#T>rV%hI_ei2BgdCBa&JO4Z;$a;m
z0_}eg1(u|}Jp<t6pg)02S#P149t~?tb~?;}fCjom7&=SszZ>i5d<Aj)b7{;N72lfQ
z0lxi-Unkq!V?O)v*~q>n*o1MA6iPR4(U=361$<g;RY53iFYDne#~~wgYY)p*@@kz5
zc&$4r`uXz>a5R6#boCD2odqI9$8f&g2F3znYHI8caWQNiD!{+Bq8i9jj}Y^Mi3ww6
zUdQ`kkEY<vOhSlL_J@|qs%EnO@(rM^S;wd6JJYt;m%Tpwr6#Lx@Cw{Oi2M>0(M?Q9
zzif`(fko2L79A&NOvi2mc&ni6>!-uYpZXR*q6kU`kv#`;1Yb!QLY*3%=t?E#rL^kn
z?|*N41%lfH;27K&#RKLqJhwLR^$dxP#jMgmg|-Wb@b|nn!I;O*<1OGxu)ZP#^5@HN
zaD65PJWa_E57;?i?;{GgX@R^U!qG+jM{>vU)}-(8%sJl3$X(Ar00kqw6~K}oO8ry#
zX+WTa5B9NX9x6!k8X6uh*XbyxAS!QO>tFOaTArT=<x1oND0mUX(tv<3JUl$VdRdTY
zBm$^zRX?k{!7p&ZB1;-h#r~J}`&>y$NgGs6&%w-KkX`MEw6Eg}BF1bW)`Rw6nim%!
z34N~1D0=vuV^x-n%kllN%z~R59ilA2HUk+6e0UYij=n$JM1{sV&^k%OlN||@LICq7
zDyD?9GX=ad#>Pu0kV6@(Ut90MjS9vxyH^=zwRyR@kfww(Tu<r~R38}G2<qnD9)3!N
z#cm)9rGPG-p58a)1sG`Vik=?{86#JM!XHRmBYZFtt-FwbdiWur5zh`1;0}QB&9;-h
zuwfBTIOcP!qhBk7A#6tL_Csa><|;og3wU8tox4Cc4R^V2U-I|bHhSp&#HXLbb{56a
zT=m6^N^cmjo6jA$$|^vybNkMnJ^10S-u+w+gomrNPlv=~wT{-G2`L>o$E$O5uB(aX
zcSmwnjR%g>z+MJyTmXp?sm%nDZ;H!xL#5>^7qH2IWQGDS!NC?k4m|8sJUY+?{O;*7
zRWLy~Bxuk5`aX1S4^&J*fiR){frohu-eZVq+zr|Rm=`#gdKjE=(plL=N2VN(F1}-z
z_C^VQ8p%D4=Ch&&{Sxw!VajCPxlO_-c>SEeE8lv6(4e%p`>vmw0b>9SZLPUxWQn7k
zbtKjdsBQpF4@6sj`PJ;J<io2D%FOKZTHC$ckyQ%8Sj;mpW?`_M;vUh+`I?)Hsa5p?
zTn_qR;{ycZl&mZqAT{kC@1Ox5`#E%KimXHX|6%W~!=hfhe(^ETZ2%$&C}jeQfJ#X#
zC@9?>3eqLrVS%)WgdiXwUD6FI0@B^x&CoqFXMJJs{rK$X{k^~Q-#OR0-np*5g&Ds0
z+_CP}>$8+7AUBADxn$|2{2-Kg6<MEZbLfZ2ALM>^>t-Z$`Xo(e`v$Ck6mUnNGUWQK
zEG?@6u>zX@yvoTT0qnjX6%`cVBPm&FfUxH<U`r!r2KkuZ<gP2YE@W#*a`&rsejz10
z`i(0>+8u#s?6sXQRuYHaT|P0Y1hynB_aqc%K_afZNZbQ}$RD1ZOphdl_}OZ0^@TPZ
zq%LZvWq){d6?vk+$lCXhNlpkhuREz<4uJi?1ch6kuU|VFOV>Ziv4Ct)&=2iTQ*phd
zCj==DZ8v@E>raE3(B0Q(v=Cymu;ZKW1lh2&%lF`M2pGNf^1Avd4RT+gddCw)H*vL!
zva%M~|DjOJ3vK4#MMXi*p(r>pz|rEXNDEO8q%1a<@tEy=ceyJej1^38HoXd6bzaBB
z2*BMIh?e>Wq6`w7RgN5S2kCe%f+X47P)V~4q%Kl>eFQXsQ{z)pP=$FRI5>D|!?bBm
z&2seTQ}6`KOb9%auW~_a&42NEtfPYm0_HUs!DlA&^78D~JMu3E)?gL8<l#!a3=AYT
zQ`ghg9fnJvn*E!It-6Abq!w`Y5uC5^PkI6IZEa}4@p?h>Rq3zpOyU5@7OJmjg~F8Y
zUHM0#UrwSW?2qw4(Z|g}@dKC?60Dm0@UMVZNS(Yi>4jdZDCay%Lh62D1%+dP3Q2UP
z+0$-HU~lI2Ww~GjQ&yp_a#vgwcsmJCY(qm<XCm@$ynIu2LGTO$H1o*l=*!_@DPSl*
zCwHJ?(R}2`M^X-#tJipkb15iU_36PK;0@#iLaYLmSV)>}&P$7xE<0gqXvSEX05S8Z
z=55h98L&<c1OA60<|hJ|LS)`BZXFsNd^k=fi4CP}Y|Lu59l@QS+ZzR$`uU;gS~-9~
z`4)<a%3Qd80l4lr&=I9}!Iz*7fPN~(yksQfkUI%*oUuK#kKd+uk}TA8Z-`Hdh-PYo
z_5}$LAO5ng3jE&ULrs738?nyL@t2o5IbU@32w1*INfH|#tMW~OT*D9ter9GfXdVkb
z-XuA#sm38YSBRHZw8Y|Mgd!lg)h_X(=rtek184^Lf_|>`+J|0E2!Zq!^WI^ZV}WKq
zB#-C|QBp0lY$IIs-Zd|&&RL&=7B2T7R`wHfn*5ehgt<r;3zVW5_ib1P_8#s!!wyI^
z8PRzUF2C^bNKmMbs_?*lhc*EZIjQ60;$lECY`13ZqvANC0Ab0+eop~#26<Y5l!rje
z<*Tn7kHrB*&p{bmr32ak5-OH^jm(JGN5O5Z7v-#s;k$a)v(tybgOKJb>7+of+N-a+
zplO%%JpU9CF*4t;TE{H`M(}MlwPSxIuexG;cKIu54N4$@<O_z-AAdBbwR1Y}kYB!X
z1$Kgo=?B0JEiD#%Khb$8F##CeBhZCuwI4JY01^r7`dSW7)D%TmPus!m*JqAG8W4oZ
zLmjC3z=t59gFEa7PVFmKzc4HhKsL`4P_;r?4ZOHkBl2t`KYe<1qBkrBcjp?^2rWUs
zp~Q0h2FI1PwN{2d!~hWriz)VX@CQfn>~Ky$Hs-0*s4hDz^d-o@Z8QI1a0tK*a;ZZ?
zL+`D(;18YP;Ev`D1P~S^m9FtK{+Jtk^d8iCLu~7LAm{jnY@ESe++Zp9EwjN>a{OcC
z<FBElxTN~p)qdjncdA2O3!o$5Rr$LLELocM<`96rb5>1}A6G&I&=L2KnxSU#PZiu}
z+A6S`;Q>#U&<6nR_38DO4AAo0fL6Wd!5u5>><DsFC1Q>Z%C^2wHVowz<i3II+nx0k
z*u5yJg$B4Ez-}G<hcdMpAT-`B;0rdEn9n;l+rB&#wodlPv-jk~z+023^T$r-9uOS3
zs3<_RD$=Bwq@_O=5qaO48xK)s0JDqUm;=<fOkRL+YUHI|)jiz#;jzBOgxB5U+S>JT
ztUUn6a#L;VQZ8Q>Bnp83h`tS_0{}d7(M*b;58w?DpFN_2;^}$vJb%Ir2{CwhDAtF(
zxw>Ldv*nZ8MDnvrNE;~2^TAF0IW9BwM#=pN)|&eIZ;Jyt%M-B|aktkBDx7itD;y>w
zoF(j`CDJ?~BnEHUk5#PZAG43moPC^FvOM22Hr<v$BTob2OQ^m?vT>;Tfc1L4ImNGU
zftwp2uTKd_SUn_VB<61~Ub%JaHAHuBQ4<kRZV>|tKS<CA>(`wyuV{BS77&0T`N6Le
zF}uM`uVqi5=KBkwuVrM(E>PAV8fMt_E~aPCz8GM5FOOa*DeYUWB>;ZkXdbCXQ8m1`
z-6mJqoOuWZg|L;75Z%rt)pZ*ml&d$;4tfbo3no$hzDd*#*m$R*F++)sF>viA0H?Pv
zQDdskC^yxLIQp*)=UdeFp$k$KmLJO(-bG_VFG$@8+S=%o-$J|cM?cdiARu@-*Z_zf
z#Gd$UxBqlkZCkPhiH0-+0-$F*3v_Ec2Iy^*9orB-8v!A3>=cS#DA+&(_;D1FF*F7x
z$S45~u@5O)gS^M}-r|n-_F>3Sz7G&bzivMRU3IC70xgYw0rOPB9DjD_JYYms_ZK$h
z7j1OPINgAfm$BSJ3kwUG<ES=020bwVIfBB57n_dPZ{8f{6;ge2@AF`1;<cxLnMI)+
z<YB4G*(8AS!KD+P=nJ*d#@%0!nU!s8WOoFTtEU0XROUi>{m0-Ze-?^f56HR!vdgDR
zTI!uYz}>y&ngln-IDXMJ#5oP%P=_ZbejJqs+S{58*HL-ZerO%~ykLtpcb`O8*snD4
z=U;))GW}HDqd2)6o?=X~!oCTli;(%Ff{wl<rFjJI`U6foKq1yh`1-hy1xh?%LMjny
zwNfUBP<duJJYaDoCAg7_<K~O~*IP{VA&0=%!o4qBuXy;4E0n}{LI*SXk)PK%If=sA
z(_RTkr>r~c%Z8}~7!jljk_}8=C~#Om>$11Z{e3+YAY1@1UrJAtxE64)o-dDbN?U6x
zDte4n6OQ}}cwUNW${$K6=_h0bf0XC?oMLoLjM^L@Xt;nN<vDDd)N>4`bk271fzgb2
zGQ_k(Ao4VVQ4fh><={BZk6A12S<{TCg={jwhdTvE(@`2oP*?&#<q~Fd=pIuD1%?_2
zKn*>9T>#0ZvU|Za`2Gq9_F^{vM<Ug;pzECioI0Ws9B{Sg*gb<5jE3xO1zg*=g+7jD
z7~l`=J`5BPU2I;SLOTY6CPzW9>)c(qc8wP)G7Ja~7PxL4Bofy-2CgjViFxGm<#ewi
zW(ZG1NAb~bFZh#&EG+KW?+#8HN<ws^B9hnjt*Ibrvr6SI@_|!*4G#f}0I;d9#ocNZ
zHZ>&x02oRr88;570vc#=>t?fk_>i+P%FH3J2k!H<I=7+4$PZ=X{sIM$y<ba4?0kZk
z#J4|yqc-jnzbp1jr{g@J(`8lxEJK0SV>Q%0gmcw2HC1?>^Tum3fVQ7dqa6aFwKLZI
z2oS_vM)?DC^MFPSD0a)MP2r#`asuBC7w65j@!^d!Nd>NjBm*@@lpCmf7=<|ZS3&!^
zwjDM9mwVMpV+6bL;&dKe$G~+CnKG<qf4O~xcuxdzbOOv5T&<Cf1=W|;InZ~46ml{g
zss%4$%)qycwl8>r*_y=;mMZ04)V)Q0iQP<txgf)E+H7NS-~|*%8et+b%tlVprpn#O
zG#&5~stbg2T|}bkmy(J9sMv&718Kftrx-|bkw^nb#+W!w(sWQOk5lt(g(R*w0X13C
zZno3?<tsl4dCjHLCUd>H3`!+iM}kAWKvevlgbM!g&lBAQ=X(J!8`7eH$eFmdM09kn
zLHo&6SqZ#QA+*U!s?SM#g<&rNSP%gz^E&x-Lk-f=l!|TM+&|Ln8Ke_N?Ax+V2Qa1s
zML{vf<fzY}#lf+)8VTw(LeVUO)<X~3J$K#Z;74Zg9rqaasfsQo6*z5|bS}42Hctws
zF-Xe+4xj>mM`)-j<81MrAgYW@w{&rOVo*D3jZheZV%9~r2yklvD6+#>|KrC?OX|3q
z*~dPAD{W$;U;k9v<dpWgNgCDd!)d*}DuyG8-UG$1!YV3f!O(mQyC&o3ZozrIB&a4i
z(`qIml+B0_T%jZ%9(s5`h!FsNJD3SWLQKo^0-W2@EkG}f!VnpTo%Agt<ZF!JeuLnL
z0jBE3Tem_tKZSX(K!?v^i2jtkSO!~;h=Sr3;BmE|O17MmNWoi!x`*kr0=fl7785T!
z=b$-`to1eaQ+cqTooV5qL=!=MushU7Pwf3r*N1Kj<dA;Xe%<a&FKLeXWWD(_-T0?~
zyxDP{uK=k`1)D$jGN9Zl$WbseGJao~h|-2nhtV`BfW%D`xo+w>0KjLUW>W^z@#DdJ
z8s9}rN0(^8sxTnBy2PLYv6-)S%e&<KE_V=X1@a=NOQH%2xDkvl#dpye4d(U`x>ZP5
zdpQ;5`q0Q`104R8ybfoeDiGx+LvG-xA&%YFV}>}n4*;PfwwFpDz*Yh-cgkHW{qiT#
zf*KkGWqT{cud%Khi@bNUvP+1U7z|jiBnijv+A-yw4-YrFMR4YL2L7RwN*9&IZdKJW
zUhQd^^uMYq^_Y<&>$T327boQmWs|NN%bYl&{I<);XSuiP=&dK(6t7I2bgDvcm-#ZW
zFdBRbD7Hoq@>Aw_Trm*3U>&vCX&;%KG;0~J%7w9+Tbmi$F5CRH*}65M=~A7nxNw8i
z`!<yAcBxrTgdN!eK%T97J?z~^-px4knrj)pWF^B7Q%rZ)toX{-(=w_}@|`!oxH1&>
zw=L7TuCx>^{qP<YH`|Guo}J|z8LEXoVExZ46h{Musnf$TU6vU=ds$8XxvoqTU8QK(
z;TMi$(H@Kb-ptrayD^HPqS+zQOeG(vXyZvQnvLot*<nnz6u^4sp)I3!R}1E|Y=tEy
z(O$dWD?1Gl78r^4ch+nk1iYE^C*@XGPtm2eyg0%TwRE>d-dDkqudS`{+-4L7x2`hJ
z$W-_8V!@c>ZB{G#!QH{3w*VG#4!!!57#c%&ITy0d6p)IyC+FgncRudSNa8lPay56;
zy7SE@80G<x>1S8jMn~&8rm3kenq%l8oRrgAY&i`i6qyg&PgQ$sSeb$`$XHb^Jhn74
zVh3x|)*98H!SeDtS1))AN$zmNTD;BsO!9vkX{_$p&4@B9Sr6qG6p-5vSWlhcPeB*W
zHQFs04JmPvDnn&SxM@*(JUXEmjlI9OmcZ}n&FmsxvJym==I}}GCh6Glcj3{ZxiY8L
z$1-yfYNb1TsSd9mfkrciY*BaNYK~oBxuf1E%SC%S9*xq4Jk`<3aI=*-!Y4hO&2MD+
z+||&_J1S+CQx+4|_8k37LF5-4ZVavj=U4hssn6BM)Mf{`dLB7W?PXiOdn6MINYC-p
zRaaL7B7C~{E}DNE<tO5*SG-)6QH91XqC+BwfDlYe*C$(X<%`y4T#MG>+#?rXk7aCO
zV0R;0H(!a+h^EO^H@R#OFQ?m<a%e1jX)0y9TUuJ0*D-Qb=a*xAm6SsL7Z)R~`8_f-
zTejL0_(&m#&b*P6+0(Mg`LUJt`cH_DQS$Me_2<bdPmOL~Rvgt3#Y#1BnLM~c*(E<_
zw;`8ZHkSR<w_Tqxw;a&3$6g#?^xdbaw(!9V3ky^XgBeovKbu@^Zl#y)h~DPovuTY|
zZQ5>H-c)TWyB?CVHzgtC+D2h-b}hnNj=_VUZ%oBtDYis<klySA2fM(a(hOG`o!L#2
zlgn|;&V1C4^G{0F(?Zhiuq8@2tDH9ns5ttcn<TYJWh(KE=nboEl)n+UREAk__2eiS
zVHCyE(x|a-?YdKxokcrMIR?)kiB#EqP5hbflOfAG)QD}hhVapB_FL+eY&V#xTKn9O
zmU@fXrSZvdS)UF4#IyV}BiwYyb(x`jB|WR@!x-cY3@n0VrUi-)wp&lpq{(oac$4DN
z<*<R3m8~9)509ike^uBVu$AQ5Tf!Dh$B2%~XB0hCj{LgE@{HZI9Micq$x%*v>Qstr
zlLopl@$Fl*GnyN6!33A{@=IA7Ij2hG`NJcfR+bCkoFlD<oU&4r!!mXqsvoD}c6a-)
z^Kb0TWq6`pah-O%acHlpa^MKm#E_j;HBwPwzTSZ=(TY_E{OClwDgxe$?&ygdoc=R*
zP&u-!=(?_F-fK`i)+#!5p4p*=lP=MkscgF;qms(Dzi6`mj_0=C<4;G#4Eef*e0)w<
z((!K(jjq%UWzTM9eEj%vtBS+a2fBJ+JNZVSzM+A7(<M@U-Ps}w)25PLpX;ZnT(>>h
zk(!@5;?T6toVH!fk3DWa@`kMPAz3LG)B$DBItvSDn`73yQhUc!*Gi@sICPVHwO{aI
zX8bE12Uq9JvD;*+T!TxFL%TNpPOBVRE-t1$8)@s9yjIGw+_ItfPBijH5|u(#TvTY5
zsBIc^==@f_J%v*PXs1tBd!0Xij2@fiC~YjSa2#bc+n&&wqj9mrouJuli^5(7%0CrS
zx(Tg1OVZ0ja{V$>Cc6{AR4psavLv+bmg~tI@l=VJ7R~Gw%*4-)t+h4ztTuA<L$6wH
zSnacHVXbG+Zn><*7S}cE>D=k7qjt?&&JId%b7<_KU3N*X+KSKhb55>u(J!qg=pe8D
z1LYf^RPOpY@$@^1sfbOrrA$|x3tp0}>zc6ZS#BF1vic#1IonY<$m_*TkbsGN;oF5i
z+n>|Z0e9_|=x+0tW-`k$GBScEGqSsQb8UKo>TOL;Y(N9G-xXn@PA9ynf#OXeGc!$|
zo#`t&_XjG;a9Sl}REi&*mv_3Wv31E$2hFgP=%3!2d;RyiV}+~7WTSSv-HnP(R8{8(
z939|4p`3i%pIck{5Q@7C+oION{3T^(X2zGL(M|(WudDX<)PM-8mzIXzHS0tSjEwwQ
znw&J|dn_FwMMv&5Az{_8U(YLPjRDN%p{AxQGU9x1E_ZxF!j*7d%AWZEavB;{+2OCf
zj*AZf*bpEMvtu*NE{27LU53x0Z6_VoyK;>NfHZ($5Vvh4>A*nKr#~ntoo={$c(AjQ
zJI>5yTTU4u1gq7TmlqmJ?*IL};JL#0(%|7NS$f0l2W+c5D~@etTMhUVC74EhBNwr`
z-O!;KW+{X$^8t^gypJ9(Vzw!L5}Tr7W%W!8V1YAX*p}9;Yw-!Iz>P>H`L^vIR&cT>
zq^B?5U9ERU=5y-QDq!SN3JShr+n!IE!0N#a?#`u73ByWra&n-=_zH+K{f1r7xI8no
zPh%sM&YZi)@vglsf2VQ(*!<1H`)8p|h^U(FK*wCKJ4;i);?8M=)mC^Qq@>?aO#~}9
z?^JH`pPZbuTWg6*x7U2%z6(Tiv6078(?CF#-SI8~4RzAily#{AbYsS1U)){DQHRCZ
zl6Y4lyAd7zJ?rs+)TyZLdd;fV)gqehUmiC)-_6*8QRgY?y3-Wm<l(cm<l(BweuYNF
zH>7laVmYOJho;Wr1EK2{f5<>WuC-Cg^uwtKl9FbuY;2VvCfdj^T;Q4TTnO4}gfI}P
zUSuJ&uC8t{zR%V;9WFI>yM4fR=)9u(dZj!|Apc$kKa=XFKW;1E$S^eUXJ)%6UmfIT
zb3>od%YidKnVH6?@u|E(tXP+`r=_Weh!@dNHKcRO7VNETR;FmIn~Bsxq{|PHPS(;1
ztdHiF=d*VMBDifUzkM@kX<w_~wRyhO?4A)C?!K4M+q%P{o<gZH_)C}8%&AJZmV!Y#
zLAHScu-qt$ZPA|T>5-vfVf{<nzjEhYcXxKQ!HKv$9_XL3;{fd-s|QQ<e*XH^92Q1a
z=l)DEE4m@Aw3HY0zAMn+Cl>Z$e6^6As-Y@cP%?e4d#1;^4(Pt9Y0lPm^MNbw-rB~-
zLt9(3`lhDpU%#FJ?aQz2-G{2*wN11SG$xy#neh$|o^-`5-lB|+74BSjl3dRo>1m2D
zb!>VI2RA+a>n9X?`S|-+?tj77&I4t6HqFg-zrf@;y)wN`5dQ<x^dwq#cDIflk4m0>
zLxMuNRb8b?KD~X$=;^%FdKH1Z7IoX~ZhGf5n&xc;w`8uS<d?s40lcZWi?kfLXkNYY
z82uFxfFJcre6+;&>=Y_6tV!Neg$He~_fT`_n|qaOTD4GCeZyynDrzjfB!jLL>e8Up
zbZ2^!Q&aaY4e68`0i|U(x!hk{Ul$gx-XN!_gIg};<ENXlQ!<Ca=t|&GIOF6DDa~Th
zxEq|*vHAJTc_xnO(Zk5{e0|fm*|yvGG2U6$uB#lbM8^sF-s?wz6V*fponYu^mW<Oz
zjgjjJW?i}%kw<^%p0;w5B^KFeTIbZt(NV3_1bpXSy^@SrX;LyN)>sYe3Ss2m=#EVx
zFa%$%x=lwc_hLcr<tB4Lgm>A<ennS$(oV*YnkwT_cAg;!C_iCpd%KPlOA|RzV_RB`
zVcKKZU54FA?f_tHcb^Ye%V%hUcn6APJFc9tvh!(LgqUK0=F|KQ=7d?`8|L%f{$nE^
zu4*j{X`R3?fGCQ3U0alB>F7qkA4eO#HA$Pq>e<-DYwboVmhY@DyL0UIWm)5v2wjPH
zH~H;as{!Qmii3lLU*B;ml}&czHAv#7{~7C#%`qL4Y@)vMMLb%Ho-NVcfrZs7ku?!=
z-LvWjsWi81aY<V>VT`JIKXpP%9edEnY8#rG<WtXUTr1CRsIN~Ay@D`2CW>zqM9UFq
zC(Dkg)!weMOk;cK@+w}f@|a3AVmiA-W@tcy+eFc6=@kv!%L<yo^NO07N;Y0>|5*CV
z@CNFnaIU!fD*k#=eg2fHUBjulE}H%G+mg9)>t;m?oFydz4Pt{^J`Eo@6k;S2!Z;Kh
zTnmGv@`G1xA$XIdKUhMYb*a_Z!GVi_+UZ%vkR^MT8N{8!etpSv;?vAT6C~{PEY0i5
zUdz+YO-=3vjiu^wNAK`(G&yBX6dnp1M(`b7uk4PNmG!h2OR<kP7?c9}BEM(-_}_?i
z>07BMw$b<5$ME}nQIaK->#&1z<9ijlj^!U^zY7iV`?As|hwYY&_*HLxJC2p@fs9Bd
zm-P`gwv&9gy(rZ@)6%hf2y5U}3<rK1HWogMGy8V8O6W4h;l$xGi4&+tG9WkCHVHqZ
z6;A}4r8(dfOK0C_#d}n0-7dpn`bf^A5-BzZ9lNql6o#m8ECO>D)`Ik~*Z!rWUYhEi
z!`n#-k#cgM7YAH+ZO6PA1~pa65WDNgDQ1y*+ataU))|hnJu482KXF_Sv)5FfY`k5z
zyO>nRV5ZOp*B=C{Ku(^ivP_8PTgcz%1SZcnqRm{kMFw7z^epRFulzU<p=N_h0)#G7
z999YkCUF>r(kEHD^yG>U)nSyr8X=#Zt8!aLe0+StsMlsCKc;OcV#yqlC)*QfMpeYP
zX=`iqI*I>?{iqb@1=L~I&@nn=)-bJ1@}a#+anZ6*WLh|^he9b1?sgBRx>{J<#-@tm
z5UksSkgys6XsN(+z?=q|b6)&guW&?~*cJY2EQXMY;#q4)2Nmd^u5X=p8<|vbz+e^U
zy+lwQR$c10Rd{42cQp1!Er~Iu{M$7z3g*(eOHs|ki{-dTD0rwAsXI=H9e=%9zTRmT
z!iXC_o}Z9q3ipPbOl@hU6_Cv>_Xg3<SJTU}49l-*`iWLoEp;}BK*A4VH|oY>yqT`6
z@^f&I4Ph1=2H&Dk)*^$CuDruPl-dBg@gWq7_2l-MuS8V@hfu8PV86M5LSHV|i5}it
zb!BpyvUTAv+v&hj0Dob0tnbk)zc{#AHuM&J$yw_hLwnYEZ;o993ZcYD9eUK>5<9l+
zYt~;dxl6;d^@x&Z>+O$2DC-3@4x2Idie~S5PZ6|`uFk;im?3OSOib(n)23BUUY-y%
zA_TSS=I(jK23dMjE-&`^shZ=0{IZ|z-tJF{&b@KE<D<Ps88UX=M_slm&>3^sxtjOv
z*(n)VtxuMX_5hHY*II<A1iO9A{-VszdSVh1Rc+8)=D`D7Tghj4KAvNywU`LP6{IR(
zM4{Fn9&Ev<{y(?i?Dm=G$p=&dmv(tQW9W>T^ITtTC%Vs8!D(6$#|Gkjv^%pVG_p~c
zHk+4=+xCO6vr8u|Sck0j@CAS4KR(}KMI8n4gU@9(T~n}9%lxx=2=hWmTmhP?K^Yq}
z2uz7Bmh{q%<hwTWp<0LWwIQ4d)+qJ{Q^`_H!T9?wXv&gMebPCe{fm+h`2{YL{2{Em
zqW(+Q4!IeA)(chh^TvA<npow%4Kr7L<yRp<$J2|8pv^53V|{kf<s8%w(}yaLq7p4v
zgf6@=Mq21z92ggrqCk#T%4i6?QI2RVYE~`R>aZD*f!N#IE3vhO*m8SQxDWw>SAqD4
z<lK+Bq449Sl%$TL+_=_aX$H<AdY+nj<?dK&c4YZvH5JcRTfxpObJf;X=;g!sGwH>P
zR%h|ff|Y;nQl*fP`zUeLmcE+Hw&Uo_QyN5|iyJxgZ*AGBIj@r;ZU7P@)aU!ZC=5ul
zF2MxdtO5z|XCWK^nOe=VAqe#SBZz$>?27vq=C1=OTpM7{8NoeMAbJ`IL~HB=^Rr&8
zWhg)Mv3{eKtPiYy84{Q(8&{ZbId%?r9?bCNl@OfM>C^LG*s>SXi!+`Jecakm0YOV!
zh3q*f?Pm%3_nw?4pq9CddLr-7Yjdk?tFkF1xVlQ{+_edCON=7pgSu8ero-%Lk7&hf
zo15Up(X_I*ekdzzNy*KAUR%58mo8!Tm_P0&1fep4&{;3qUx78DP+!6`1yQK>lq1Jo
zD325D-92{9rb<*}C2JbZ&j@4?Q(R2f+sCa1MWP^u{XyTO<h*khSf?UHGp|#kzMTc$
z(_Z-MIE^$M!Z8+JUa&KldEcN=?8b(MH-Ie&pZtCYZVEILjVwTyIg%VfJqZlt0CtB$
z-QzmXeH3-Cv`*LmCwM~`;i<cL4I;=#|9o{M9J=_=_u%)d_m15AFW!FS20Q<suXiZ8
z`TzO$#Y3=$|9t!2;r&bU&kx*=>Z1^P{pagMGwRGg--F-Jem-;&{`u$Ye<m&fA(4j<
zk$p+bRMBN!*}r1F@9~iX`V#K6&k{<<S>BmmK*67$#QWd<(}pJI52ku|&f_5iJ^Iyp
zQ`bN!kaZh5n|mwIfYwo{8Cn|TydPya)VRC#wxQ0*7(acgL4<r{2#Ry8RdMin--8+0
z|9$oM=cQQsOz_@<0qT$I?9g;@^gHq<szy1irG3S=&I9@7JsrjV*c=Dn=+JS8;;^CQ
zk$aCadwP0W7sO~|FCu@&_LVg@X#yQgh>UPmk{!4)>YeGqCafjvupe!YJm&UJ3rYmN
zkUy6?0<XBf+<N`-{T0*z`-8Xt-ltiRYX{!~S};ASHxW@wOUsCeIP&ZX2JkoY@~USK
zG4C%sk*a5ZGm2{VC)}FS*>gt95q23uk(~Rx{HVD#g|$NvOv?SG`2EeFk>O_K&EW4<
zk-z7~SeaJ7LZ*&N)}9H<3ejcBz5M_4jJUXXkg2Ve)dwni<T)vODk`eDKGE!tDgg(3
zA^eZM$T$8Ykr5wt3E_2@L+aA(J|oZF(_t(Xv0)1F-rg<@GYdR8tn>dkEM8r~dnRyL
z;NBefI(`ayPOh_cUdMn|*63iXXaBj6Y_N~QNA6vurKQy}H_y!ZRP&4k51#w{BRKL4
z;ym{B^epOOKR8_L8h2#OR&l=l<I`CGgnuYE_RvKLPymh)12rr1snmH<mXJ7QvC?<@
z>yrcV3-2P*4*7IO9u2!m0St(U2!a9%MKZF&!XCtI$Y<xQ_T<B=s;Xv9DJJ&+xZ~2l
z(-xZm&<O~^dk-FvoO}Zbt&H4ukhgpC2s|uxNK~>N%r&8Csl;NF4+r1v@$cW=@yDOv
zeJwUt`!)+p@#vxb!%WaMr~=4XirCn7#~|8+wd(w1t-c@d57ofcp$}}JzCN%xJ^ei9
z7<}!MBT#@=yAl-FBU<|Y;7i^A@uhEj&b+&ck9u)OR#p~#Ga5Fx0$`K(AC9>5QLN{2
z*z)o+*!ju33kTQ3_|rc|Nc?jI9U&nhkW586dnHr6lG4bYbs8AN!_=t&aTPy%;oy*c
z1OEN8T;QZQ{2q?!YfN<X2wax93FqC7>nGvqZx<LFWV|Z1PUGWq^jjVr*ryBseqD@M
zfCb!9;o`bOqj+rC4pNwIb90lat8-tz9Fv>N1}lIUJpnS>2|&tZ=HlWKsq-Mf7vhUD
zDww*oe?64=|1oAZGA4){1vU;2a7>+Q0lY&ZiFRZ~pX!(C48UEc4fqmIqx|<N{mH^V
z7+FIw{vkv}J{JIvky)Swj>df9pDc8Sa2l7RnyLY@=P<%B9z388^dtkVwFQEaDjaw2
zoE7$`HrbjwV2F2b|6^J#dV=??;R1bXUt6>4=?J@gxv04K%4Hal0bwEU41p^_2qQAf
z8nE)iXRjVG%_llpm-Yuj7~1y!A8Hu<a(A0;L7h<w1S3B5<40dAZm!s*r0bU>XYNss
zJitdrllUk`3&CgA3-uR>5T8YJ^!HHcy=&E^xPQNvD0|-R6T%~o?RWdz@F*ik2PVk6
zzDY<DbVw-$6#edOJ=>hz+>o>;-Ryt{-E+uYd-UeTix=eN<n*c>KpBF96+r6QNm0cI
zV{rfHsI0JT9c0<>A;tEgnHf53U7`~PLWL{C_Q7BPtV*xS&&Nj%WR{ft=3pR-o@UGa
zW4U*s#v}58ceV<#AC(I`=JxIS-2A-Hix&|sop~lbI8J5ciW-x`f`L4O)jwXp40Oz%
z)pO-G8(UCq?=OTiyERC#=Wrct<gu0Lj(v8Gym?eE5Jq%g-`qr;vf!$`xm)hUM^mWQ
zc!C0+`y34>#M`&$GHOYPGQm!Sg6i8`T=7Z=q{mLy)4cNw;ahGELVP)V`&Z-%3tW-M
za6E}`!7hPLI^KhWgXbhWd5mUi!t^AE;jdBct=V)sFxy(wjAx*rR#jJnf_n4ho0p@E
z2P0nyFiyO4umQ2}3FY1QcSZj})}_zEK-o9ai;KAdX+h*TJ2ILtQ%GGUM4gbkQgz|a
z^*&(F;oE27PqG6D(+)_zTMVv7E~s2`;zo0w)3A#ReJsE*Vv>>`BRAg7UFs$&G^?p>
zlbq55jT58<$pp#4fI?R(l27k%U~}TQV9?*w{Ns@qFikD+SjU2C0YP|DNGkDVR8;{l
zp(rG_aKAu~=W4prP2iqyx3}LQUR@|C35|&GMaVZYQsMKB1MaXc!2W?}|0|><#|3Kw
z_gNmid9?k=|A(&mKl&|l{{Q~^AH^KuQ~!MZAF(J@KcF6o0A43B(Mq@(T63LgnL46I
z;LY*`)}U`_D030!c~KfXX-JH)iTUS`A5IV|tOS$4zP|n^w3R+A|6>2{Cz9=7=7VK@
zRsbfD91m`ID{w?@EPMn-h1MLoXV!5b2N1^tbjrJ&7lhFS&#oF1nIwONcT!SPXjGK!
zSJ{jEVskcVpZ^~Wm>3ifZugiwsG#<N0V;KMbwrCm#_J}51`&u$<>$}WTB!$9LAc1l
zWAOib*MPUnJpf-6xWEziUaoQ8xez!gQPXKJ4TpUm8VqtAVvZkzj~_dxP>Kc*5P0^h
zyStT0PU2On3hWCc*30`B|6tsAtf121&!N%Y5G*)HXEU|B{Yy8S2>MaM=gmqWhl9mY
zuARt0zP?q{)1d+fVx!yX_n9G#?o$>7ddbPV&zqR^1!FYX!+o9j%w&*ZzFt3l`t;9l
z-@aw7g9L*>p(kvRT<636*?c*0qa4g8@hZ$lHp{3heR^SmQ8lD#>PmP+SUVzSja5>_
zH>hc7{2}dLuH#@OUwnVx*rV{QH3S2_c^z$pRaG5(c8u96dW;obz|(GWN(Nb*_4QVu
zB2~kA$Ga@<OOT5Tt)ToKd^!A|0(6nDx)BlFqib!OLZIjwsPjen!!Q7EwLeTdr%RSC
z9JHXvF>S-y?s%uN{bAguzA*0VxCbNMh>eTAvTCk_l7NsS-NqtgRDVQ+uC~5DJ+S!$
z*&c_S8xaW7%a<YS7?WZo43%F$k(oK99}H<>P`j_D?+@u#3sUZG5|l&(+NEMo5oE$Z
zB|R<4arpF6DU7x4#0NT#=o|t%0Adclm!s11Kz&ZViT~SyODT(EFh?HhpcKFnOAO&D
zCPp}OfODumx3A0ML3XdVpPyeVG^=<HSxY(5Q3qzq6BBmreH-UsjdB{<XHh9L^ZidP
zkTd?q#RHuk1Dd8p>tIYjh&tl$I*soWuTg%_?-z;-(HGkxf|n3gmY-vM@N_RFf6Fei
z=g{1)f|qa`(Z0Uzm<0cRzSMBO=N5XhxnaXZ>S%3|OOra#dK0;aQ0+JHyy^ZvMLjoU
z7yNyq{-AZ-0YpKsyu6Lp6~HHprbm`Am%}QHgpNU1Vyn+Pu!7m+1F|n6AMU?C7r|6(
z;od_u+suG7ya9k`WXa(pH*2stK}{2_D=jSromY9Yk8%H|cNYjX{B~%wh@ru9>ua_Z
zcQ~lJ5B4|MIjhHbe095ZrFA||<G_}^5li&@*Y3dAitOy}#-y338uW~tBH!q%8kU)p
zYvPT?mK6;s?C;M#9X6TY)_GO%$i3l@5%>4mLrAdrBJypCz>*Y$bCH;tr6uNJ_5o?t
z8h!X}V;}hiyarPYVJZ;5Ht2yAd-%fI8qh@H{#{1+8+g?IWzDsK`2~M*@OlSc=@)O`
zBG+|*y>Oogtpw{biDrj79Ox~Hkq%A2ZOJ%r3UC+Og8KI%SbS-Jj*!%?STq3e=>r1;
z*4ZWpbDT|{`hAYUp!tAjFvv8#AK?a4yrS75aUaFf4mL13L*us%yr_&=`MG(fzGAep
zD(v6)XXUW6?KEQpdT?iF8r#sH*5RGm+rM4g_i+2asOjnH&1|&ZuR_)*r@<7$Q1>MG
zUk(BxFwPHF4*$Qm!iswRp|6ZrwkV=*f&?)_Ki9(X!t=)Q3J26*lLVfCzn^%7xJN8L
z)>|I&3?aCMtp4*3jK2OA|6tYQ?Z1=mRY}AF18BI2{6YqCJ33)e_-kqv{3Pw|B;bZ+
z>mxm&g{;}@zpca&XyH*N*cGh{#_TB<k+1)E&rL?~Z)b?u@d94p-WNacC0z`u3o`Ax
z6Z@xUBSYi&>&p&HCh04(PPvSX+J28Oig_SiN9a$Viv~EFkoWgr_e|ihujhdnh7Ea9
ziM)4J&p=4FZs_2)JkntN?bJT+k8ETzAoKTTUc3Z!6n9>{_0O$L3Hfa+6Y;^j(!lMe
zTZ|0srjqj4BoZ07Pa|*bzrOglyn3ev-kSq|l=k1QsN8E&fAf8}HQ=s)J@MPW|F1hi
zhjH1qLoL!Dc4?~lm1Rxcu3o(-Ab#b62>s)GU%W2UtKUpie1IoSB<Cd~$MyE|=Ra<Q
z_{Ff6(tBAvoO#5;YH(S^^U1|CVjOP<hG;gAhkRwJq3wBnbTGrx!p})B@_G{wOELA6
zotvO`p&mcDFSokRGlcl04qj5H>HkZA^k1K&?%n<j5B_(rO1Hyq|J~;(k|O}y_uu`+
z|4ibq-TA*{C)8%(yxiXFb$@+2+m>MK2X)p{?O8euT*sfsWa-oy_T|y6`@8OqiPRhB
zCJXy}<U;Zq*T2~7U#t1^UkROP@SbjEsG1f&%<s22MJ4^Ze_&wd=<yu=7Bzq@kEsn}
z2pKc0c^}t*+$}IJK7O{p(2{eJ4aB|kM$bum2Zz@C{}}S`U!UJlEJA(r{i&5n51QN1
z0>Iduqi_^aR_@t0EjAxJCZD0fD?HyCCwh{wJm{3nBNrDJ1Y%r$57HDn+zv6{HQ{Ge
zVeRsuaY^(##~|_^fF9ZGmY!giD!7<l2CmI*e$s$W(J+Nt!`#`Qp2QAI-#wtRQ+P_P
z0;1yHWXyTq(DCE})cCjrENtqQ5cc=0S&#oBdNs8p1VESx52#nQ{dwcf$EtcOJ@6^w
zoA`D=Q6#!Ktl236c1Un|cwZ3I%1q>FRi3n7?Egpr`%eF6`*j_f9nXAc%>Xu|HJ~7U
zwj(70`U@qh<R&M}#Ch@X@~%TpJIp7L%Vp0NvnK0vmYA4oPy@<(186MGhq$5Tb9#|g
zrmLRg&P<s~xeErLg;cj8EY4<Ov5^Sc+Q@(+b`DV8zihh`T@ljXUOCtQ?%HXb<bPh%
z&ug)$i*6JmZ%&@ec`Epw&Q@1XkAaa<yc~*_pu&7sYJ|bn)fG9T?T5p`s;0N+`(UPb
zO=$S|_;%LXBrQptljV}$^FbCOn^C7)f<(lq0EtXro~^<7uK-1?Nv0CXg$v2nb1qT<
z20H!OC{<-W4%)p~{LISAT3f2{C+Xoc>)Zu^0j(_`PcN?<nbq@ib4GUcj4C-_P){yh
zy?RxDYl$d~%et0L`;v^H`{|bUB-xp(K)y2L3;A>@f*u5KdWCFk^4<pqo+GnWfP#*$
z@tVM(j~^dT#XQP2>=0ot=XrpCf%R)0zFM7b_6(GLhp{hEr736AHko8-mP;@(F+FtH
zixu+i1hVu_D~IJ6Z~4tnOjry0dMC@LbVmTJZh~QF>P*gIH{EUb$p%#^)Yqe<xW|7}
z>EAzma3Mh*bxWb~N>5+e*ie8$*Osek7_MJ`OiU}*K3eHLLrDx+?g~)QXf>BMlB}E^
zZ`hs~jZeWo?aM(M<TZu{Qud3{3n?rpn9i)mCOr-uyqTxHys;tk?AeFe_9W=;a0?F)
zudXY<gxYy6$_pSoa<#umM)A2XuT0c2@bIXC%XUI&#}%`?shFmcJ3o3w*zacRZK?N*
zN4_b;(qaG&BH3m^6^HwH;md~)B)mJ*{P<m(S<gHnulhFBgigLCq~>|#P3D@Kt=H6&
z1WV%}QdCsj-r1?`>Qc0xZC4m7lQe4lR2X*a>EQ^=h=I4;fdD+FU*)rT+VZe2)LWAf
z5k+sWPF=rt?IF~gbj@Y>KXdz*1m<1D-~05hA4m|)*LzGQrKN24E2_!Tv0Qjx#Zpx_
zU#X{RReC*CK{bCQmSj*!eNuGu)~&BfyDP5<`I^;j2Xx5%{roz^*o;J$oyWC{ZnCm|
zIP9iqzg$T+uXW<YiJj?Ke{ZYuYcqV`)?Jwf>C12~X->}0s~wV%XA_fW-1F(mBy?B@
zFuo*PG@sQCu!F?GPa)pKKP1U!*xsDo#3$;ZCd{FN9fxF}*4HP-CPqhPhD|;&C`v%D
zkj{mCjyB%S{#elvre&u3?Y8QFt>~|x?w!yDzIf3L@Csg5`BI1q_q&y09dc)~#KYO!
z?n`{N&$j0WV@`o<8V83EyRx#9<qfd?9=j-lCjw<Gd)Qs{&U%;T!YFv_IZF6Jje5R1
z(;AoUPCz9h{Ovle7<q;#F&#<r)=<Z6XId<b3jKt~ChdsJYP{Q&(>h0|bxh@|`2L#C
zzy9??;h_$FyAR6<hHMTh>BDy|UyfyJSFd#_YW7t^5^c;i(ctDD2`J)4&(?oru~~-G
z1RDNGu;W_c-b428S8Z)8q-ki5?@sa!7rw>W&!yFDFpHCVSNTy1PQe%5d*7ZhWSOP(
zC@uCmwbRle;FNtcXy;3pzW0_n_gP=pf=cM0#m_S%%Y!IR{A*%={X`#!2q+G30xGTx
zRi!1hNiLY3WW|g~F5AVMVANEs-z4=0CiG=0($TN6<U7yqd^T+0<ZN$l3Uq?Wg=!{7
z^`Z}c=I<fB449G_B$P^flQ!sN_Q#xKPynPn6RSoXct0ZcFqnnWA(vvI5GM6eK9pAr
z$B<JjG>C=P<l}Gom%bgjz-}B0jOu{j+@PfuQZKS%Q(v5$OL_bDk6aVS5J+n}VQ*(g
zo<21)5)JMGfm5V6Kg&vAL}&;g^(@rs0P}RnWjBr8Y%s=puJbzl3e2cE!Zr`4#MmD5
z@DyBi@;rPfLWiwh|4A&V=DEJG>!YS_iPIGD=UMsMn`59&CMhA&$&hinA=kvgp$N*~
zR8ujJZaeLS&iyAxcWd<mh0XK=co<mJ^K|MI9=8sE7i870I&D4E+Vi}WfNC-BiYO|j
zW1E;V-xMRQnvZ=nMH-NrYMiE4C<9<>Usz59-eC7FKAZV&Enb4fSFPTjLyfu5M=qDH
zwR&@ELCT@SN=*VQ)RQ7g!SFHb<<W;wvZ@UAu+U?2Y<<jM^&C05eu1f#6@*8npP<Y6
zS-P~Gpjlk&m_NU%qMH*Ai|H+QEsvLUm4yCGZKIVmb>Js?PGLJVpiov;R%Evv^94uB
z-6T3z)#8qa0{)gJpQ5nL<U}0Fzm3>)|9E}Ymjcrw{r$&}Nq`5Sus&;|ps$}eV8Ow`
zVQ+7Los+XCX&3+GNf|r4g1tQ_YmmH{z12eiyF<FYT~t_j<ML&Jkr8NRG|#axP^<{l
za3iQ|5u}}T1edj3zA072U2~b+w{KTEFhQZTVfWV;AQ$4H<=9Mfv|yG>T34wiFqd;6
z=)Qfs2PE>?gMg|PbOw!Q)ssLMz_a7Ne3=HZB++LIf>tg;!UPl-!KtR|xuuaST+TaI
znQKoWj4<1kk@4lr1I*SKdt5>Sw=)f}+f47u>gqW_Gp^sv6ngLgn!4jU0cImzY^7Yo
zYxX?x`JP8G^&Qw)tLf&Ev*wYPE=8X_aUviiBV%-|={oxcAr-iny8XUSM*^Uq9Ec<m
zawS1fPON*E?Eqnkl~wNh_wP4U^L$*kClU#0_)_cZ#S#W>yDV=qs}+1pM}58unv3VY
z4Zv|Cr6ZY1y~waBav)3TrcIrofWQhyLp57h9Pe1Cl+DJqN(e|p9__>TxI!-Bvox+6
zP{G>;)wV0^>O9x3DZ|xMG&D?>^`oPwe+29xS*}JiGc#drwTT}XOyN&8G;H9T*RK;r
zf^I+~_0}ZWgf*zOxpC!6#mp|E8pXuMiih}9a*C`@Hq=>i!+5e#0S_g*z5)U-7lMmH
zY=R(71{fXD3Et_cse~fyIkg%*%u1a!OpVK#zcMHU$UF-!cH$kKT6(zBpt4x}u&mYH
zN(KExrYB1$*Ll|la>+P(hlUpx;(q<2mrtksESsPO7-^Rh)|I8F?qn$X-R9?PgSiek
z%%v$-jYC`ObjQX09D;wR%tqlu_fWT>>#E@T_Egk)CZp!hWqGEU%;w#%N;kv!FzVLx
z-O`bfkv4VE4Ken*Y`h_``1fB3^_&wO(S>x?T!3Je4{|^J3h9~QjD~QIx`qZuVW*au
zhZk6MQ?Dk0TMd558F{u2vK+3GXj^=#wjDtC%qwg|Q+wWgH#Za&Ki1K&8xZqA9~YJ=
z62OJ`_r^T5^rhg?0Q$;PWng2Ir*U4(tn#Ocn(GAFm}=OOJn{A#9bF2b7Zv6?PJS$#
z9V#ye5}%kg#07)}2ir_=rK{xDnr?r%ZZ`MgICa5_8DRQXVD{!Tvn|9deEt2qO!C>-
zc+*dwyP@BklLXq+N3a6)3M5oi!k|gJ7^p+f_3z-IMpZ6JCXO-_#E${=_fCeR8MM=m
z>4ltfoqo6jDY^|`)vCuO`75WRJ*aE5{g0m}{|uUZFC#R^Xob5TFC8mX2fF)+hvReu
z$54(cdc=bU+N5)@mQ2Del!4Q|_82Zm*j@9OFb*?XGO`fLIUOj#fMV9!zWfZ?laXxt
z&EL|^t{QAE4%p`bmuUTPUADczJZEGJ`d)NadXwd9S4)73cC)MIhu`4whZvvR7IlpI
z`a5g39a%b}@~KKK>04C+SA<zD#(yz1O#;zQgYeGplV}KgD#7T|ldUJY4wlBtSFaYT
zJg-9e{0!J5&Eqv@bH4(vJlrYN$;O}yp(VGZVe{t~Hk+vpx^3{SY{uQs(=<xChN6@K
zxJ4fDwkFVMvjPbPg<z<9PA0md(O`Q>O3!Bkins4aM_(%BlLaiQdA_L5G}Qz?=g3AP
zZpV#J&|zI3j+Am41XkHqP$K#tfDLqxh9(0jqgV&*CHuV1)z!9QbQ$cmY5uOMeGe>v
z)ojqIA&Q^B>E(=lX&uzw%8ga~v+NCqMMkE>b)HGfAIx$L@%1tOvOGpde<v$opjcd2
zH@<9ZR1}|@=k5?%7O)=LEt_~#pdUenEiLd3NNzS*o4(y!U>-YT<8{OJEEQGS@>q3}
zMyZ24dV)P%9Ei4KZKf^PW<e#vHw7r-!iL9H;D!DK=Wx54rdO3WhlbR_?akh=3#TfV
zXRMq+VsVoRVB=aunM?IUPl<q#EXS3~04{4-szS=sLp;Jm=H8c?9di+*w!a{Awl&VX
zHki@K*4dan{Qdj)fWvkhpN3E1I3acYro9?98g8P)LayR^x3+)J01f110oct4hjj-5
zFozsptl~q8>IE*VL@3TX5p-R)%Cxkg;I8<mEq6#fUv)yq(p!A&x{*w&{nR49%dZA*
zbE0Z~y1VurCMF5Em$7iDeG@PKok1YKNpUGpA4Yw(U3gHI(g7w(b02ad&~#+&+Yv%?
ziRr*EAZ`rd8mZ*YiawUnfAkiyp!Vz?9s6=um#=47Ow{(IQIL>aeH_MV=?;jY`bwdq
z@8P~BglM`bQ?REhg3y@{K7RD*cy~Gx85vnIW=fv*>qWTm37`;>li~ug+%0*)G;^GH
z*^5uCD5k)nl=*FbKTgx!5?iicA9@=x@}4g9KfWOw@AKow4_2d2kKRH{58w%wH#6jF
z_?yZ;T!o}J%DD-JXTxwA^*0yE!P058`Y}JD?KtYGu`>~JW#@UPhy8~2L~YQ*4*lJ`
zkEEpodNZ|)7fUxaDr!~=eQRoij#vy#{djYVRkxnJ!n5%G_`*WkV5y@K4(ojKk0nJZ
zsjmZku=vw-*C^Ci!E6?NPi;R=lm=!TnE4!^c+enj!3geb;zuh2lHf^RKN|SF!p;=0
z7am)yBxA@m>GL;ii7A}fGPkytj}r-MFSMisZNLSe{MP5@&HK{)+UfGKLih`VRI!MX
zi^XDXDsfknY!-S|GPT~o)w|5Wq1cfqUGe<pU2i}yEZdo75RcpoHn`+nw+TxbOaW`R
zS(1N2Cg_H|*IG7kY<Z(DmjsT%P<@W=y_M{qrY1?t$@<Qihu-6plS+(Ba5Wc($|XS|
zXJ^FPZaekm7{r?NxwP93VXC9&=IS#k&kT37toNFapw0Gf-nmgW4DF(uo2AO=_wO@y
zZ&k9wPDVy1eSz9;_z=WyR6&pG%-M>%3Pt>eK;wuPp%l9_S7_QcU79B3d*S_;Xh9Fd
ziCWii(lkUXD0gWxs0(heu(d5eOLOPhTZIgbG-xbeVM_t}_WJblJIK6=g-DghPJLgW
zD1aZO)dUX7fQmK49ayO)4Qf^J&22eE>VTe&-^JjyS3_Y|5-p!nhA13jtLMSU_VV&V
z)LjsG8AVfJho9r=*hIpuhvuD)n;QU|mH?`HXc@vj3flY4kPX^e9uu>?4;q&PLO<J6
z7_g~tND<}4)YoaSn~xr);&XcB&$p9^NESQ7f`Woy;Io0$MwQ|XZbpqg^A|g*u-4vU
zTYm=tkFs-x-qDD<1A1utw-?M4j=SvPAbqZZeWeI?U(>B7S`3HnUF|BzFjfPZvOG<>
z!uphRI)0hAINNX&y-sVO*RKD%LKyA`bjo0~GM+Eyn)6?H#o`DN`|4YqXowiyJ6%1^
z8|`^>;NSsKt#O?_I0S4#qwN))_&^+`e7x9sL}+ggxt0sgd3bmjReDWaTiNM0W)}}*
zeGHt<Tpt5khVyczNWy$EsK8--&JO9sGQM&d8tTv`Kwt4_vohi?>d|9ZYve|cb0)D?
zlO6JYI8bEM0bSuE(9Q~JD&nBj*LPtlc|+1v^OGT+jUWvTsu7qYN#K`y)0<ITTukj!
z;1Mq#Zm9BU*bsIcNZsD=#|b?1YARduD#Z+JRZat3H)|-PpFoR7RmLc4Qbhv|k=Bsk
z^wJZ9Q_t0@)2-055rXClpl4i8Al)tQ9I(yrz+!eusHlRPcH@%SP5VE)p>UTSm_#6P
zKo*=Jlq%)w#l>tUy*WHx6l{hcu&YsQg`|zQ&Vma8<~pu?^y^i>i8^>2M_vUw3ele=
zUq2`epj0|LriE5BXB$G7HOdA<AjrSIw~Ao}hl*2qUD--40|D7avPNl<LI&210Kl1r
z^?#kI_NoAREe&RSjb$m5Iu|e&jF*p3eV6^wqet~Y`2*EQK0u=hHhrNtR~9M;UJIhJ
zish@&zE#qsZ%{rF<7jXHanhaLxcf68R~<I7T^hawCV+b#sFYHpXco|eOnS1E!Emt9
zch=O@bY7{Ud%vQH`g(UI3w$x{vXZ<yJFhP3E*8zDJ55ai1I@Kxr3EX6bB&4DYFY}I
zCX?pwb4$w(kmG=kKi0e>$<rdL32-<ggm=}_?t+YAs1A+#WB?O9N4y$%_{b5eUK>Eo
zS{wCd4jV-Or+lI3MS=jw;QaKsPS~}@i@)jJD6zL(Rj<#`sS75MJj_ab_G}D*%a5ms
z!=Rwlc%QX(E-5K#Pw5)lHk3_MVFLt<QmNfE(7;KVv3E6ze`ZVqXWj(e<f`)uxVVz+
zS10jIY0jPdh<;oJYqxR$S%K(Wpq8(8RDtJ+katZAK)e<g(>Vt1t_+!g@KH>}9K-7w
z>H~j`h@>Qk8m@FRKE-r^3vX};1bQMI1t+HHTqTR{Wc|l&YHgqr=?4!U1oZ0xV{HW?
zaZ2sUSG7V5Fpy;<A1<Ga5fA5<gMDzyg*Fh5>D4RsEY9owmQAFyA461$zP;xPW(H3|
z6aE;K<OVZ~z&>$!!bMI2Tf@DMZ+l#}Z8H@1oXjq&iFY$q$cKD!X$MgVM&2CS?iB`V
zZHL-hUXb+Li~hpYx0&Bkfx)Mot$VIOs;pA0<^8oNQUjuIfF%|44NU|LPbEh`z~GWA
zwEgS;Zq?(6ZlGVXAtola-dcKEq2otdTpS6kAf>sv*(ul4&ku1Hu5`pFu4VzFkOzi*
zu7D;c=5hxpj~-n#EV@=@==}Vl$WIyT;M)yD(+GgI((ZPskUzxhN{D@_h0k`)$Hs6D
zMV;CYHC-DX1kTrnO#YJ;q*f3^`Lqw^cG1&*@P+~$Al{&9T`=Ryr(0prEEqC5!F5Er
z{8A#aY`(Xq3{in>7e5&UWYz(9(Cu2B1yep9x|%KK%*i5}J6;lKTA)z|0W_phG2)Oi
zEC&w5_NnA!P*5DA0=Zz084i}b;oBM(jNo(beNF-ASSWKEV9ZN7cOVPqd|oD4&}%x4
zt0fD0eHIb7jB-_i-n|2K9@b)WYc^rpDGkQ_m?yeZ@5$h9@h*MC6s8A)8rt422dZ>W
zF5_uQ$tKFcZzk;FXV0F6R#zX4iiK&M<$#Of^(OfH``;wp&Co92Tk$pshaN@et3b~O
zDqEC&^e8dXwX7VDT+gl)RA*KIHca5>h*<Y2oQHZn*?afg42n}zZvr`sK$&u8pRfzv
zD!1Xryz6-l=Eq$2D_?>cRntLPo=wRpQ-HqXBMu1Xgi~+xU+8TLMjqw1ZCvE5S-$)v
z6LFA=p(~-mFk4d-L#*SnA!Jdie0}1Q=`(>`?t4*^0M_b02i86VG)!coJ~P}zb`AX8
z;ch@&2~jRuTLjM+`#DXzzkX+;CM5;uJXcs*g>i4rV;0@|<`Vl=65{MWt0BbQSW(#w
zj<9iPhPufV44FJe#Sq{bzsnKc5MPenVQ8`)ZiyBC$P~`+s*zs!5;hv#6XRj!nPAeR
z&otIXA#srzM_oYRK@<U4A!3z+67hOw8H|FAZ(}!j_7vK5z_w>@4`t(?jG-4mi-B%j
zNE-a%3pm{%tkGMFQv~aN1VbXMu@M)damObLz752zCYzCalH=xXuG98O_`3_~yHE{B
zdY23!jFVTVnx?{VtDBomiUHq2XYb{$1Jbf=z}ws8)Q!}>>8CciUVob_j0H$22?UMB
zfCA(_x3;!gjC0;3Jq2R-KPcW5g?QwR)@IiWRPs$t3g*EH59}}8tjwTj9-J@9$}D1F
z1<Qk}2C~8(@aRX@R_nm-1D_cQIr$eM-^=pZx}nsLsR=V*8jQRhK&6`4Vu9A8dijH&
zI4wW9Fo6;ScNd&aZ0%p4UU~DTqxA?OkG|5^$M0)H0BF-J<1iZdEUEkQ;y|%cZ;ma%
zC*pxaNdRnMskZoh0Gw=mjsc7H@%wmjM>=5|&}IjpV-lhk!?jDnvp%VW&2VkF!#jz0
ziZsz-{esuq#Eh?BRrY7w6lqd~bvuMP)z5EkZVtM%2cWVigExXipF+FJ=l0Dk`p4I=
zUpH)<l;}u3AFq=8;~X?v1?7H%bEM#6@J;2I3v7qa5lL%;)RDHb(vIMF9el11?*2AC
zAq@dRU%Kr`Z+{MD{`Rk~;2DYmzmq{%x_T|t(UWO9MMv_|bb+H>uOI?~3Zy+OIbWMX
z>%a%BUE~j5s{7!GD#C2&f}G1kb{QP+TImmmPR`}^naY9?S{PMGk%vw#iomkL1ivUA
z!6gpiv((uR?`Ak8{QPt0dlJ7ryt4W}I5-};ub}*2VDplLf51iX-r$AL^t67(7Fdkp
zrzq#aZ3o|%ESs<x<d|tTq$iePZe^7Nc9X)mb|H|PB@cryUpDZFfvGkq$8O8v_dThk
zp}L0<3`g({`Q${!jA~%bmpanb`<A%1fXU+b!J$-tU1|f<p5*-bI4CZc3#2Vgf?tzB
zfhgJ>BoL8cXL<yfluJ%ij{tLiodK-{v$()%@j(!8hr_f#ad`MiN1Cc6vc1q!EsT_I
zb$J=^h*Q){!2f)bkdVW871XpO>p5-`QU%eGk^CDsQ-i@z@ia`20W7UZhuI_soQ)9n
zC%|P?K)Vm)eB&MqWJKp(zF4@J2B3X_HS-4O<e8FFeOsIC-jsIqU%3DvNf?{ARyH%9
z?Jz|s9>SD_VnXjdW+q`bY=6|ICI!A22$p8NdneVAd@enVtpZG;sl)5?=Hog>ojJ_?
z9|HoSA*wj%&0Ho0Zf9@@M*})N>}jXF{b?GSD5t5@07f3YvrdtykoFwT@K)FEgFDQ>
z(E4T30AhXe<jKwoLVm5VQ}n8NsgaJ0$`v}50d+U8a|+e)=mGy!jW>bzd>jJ~kd6ZX
z!Of9*^5k7blhuFRV$=r$xW=f*pq#Y<;7<ahD*F`Ic`NXV;0+3c86qGkD4q|_K-J=!
z6y%7Y<JsK>o-~CNmHaY6II9LC&2krz;0`}>)So|p?pdr0mll{a67sYBnQzh;-xyIG
znr8%UBVKHtKdYsg%E-;F3ciNh^K;<tIB!}##Q)6zv-Fd=l;q5ll2S4aJ8AGT6sbGa
zhh{n~7P`2bKm==jse*UK`ZTCBvn{b6F)=Y6rMs95Ja%tE2bcf6I@2<CslpEAL`*Ej
z90*>{(IHpdtHpv?Us<|oh;@hwx|e*?evgZC#U{~;o3b$80)VyB!wU>|y9-dm%7LQ+
zfWdyt$84yq;Z~W$x*?zo_f+DR{as0FoM%$?#J~!>A%BO-YiS}`9(28s|Ha;WMpc<*
zU8AU_RtZQMksxRpKvaT6i7F-}sU$&yfaEASV<<6$f(VjPat@M{ihzRT91lo1z#-?%
zosZT1ecfICzW2}lc^N$%RwIXV_OtieYt1>=TpBw(aGumr3nqO%dal}kGDLd?5Lq2A
zN7EL15U2G>lSbbVRAULfmgN!;Tn^wtcm-R(d`BoIs^ZGtR4j0@WQ0Q{DFMkcQ&N$B
zB_j$rDFy}xJKaR=TAJ|-z!M54OPL~#PiS>UH=jCw08j6(H#%F?*yKaFS4CWx=t{n<
zM1WeUPoYu)QwvNb!QsKXQTr~(XzdO804_TL6kWM|Ipt<1ga#-#Q+iS}El8YNWIK{;
zXU45h_n9#Qaex2_b25n(Zf5ZPx}tK^dY3&$P#UZCUG@Isk3U9qEDH33<N<mmAWR@v
zE3^6{A0!kG05|xwb!kfH%YzSsokmG6)3U{Xkl{}0V-#M5{Ff4J-^Jgdd6qQ9p`0){
zk$1^$zo<hE_Za9wgoW2F%Tu+NSoxo`9XWDLI5)M^akQ)8QdVaZpVkGcXNS0$e($yr
zD%H`|rKL75Eh#a=a2AjDZ8S7C4n^2L1jmDL|B(6glQI@cEY_SMGxpkhr^2LbxLmah
zwE<%rx2E|Hd8N)!3_{&cB&q95edQT=!%MIg;BRT#OTLUK$15j}hEU_*D&X_}^0(7*
zmuVBOz7D>%g+omf<1<4NA22T5b>h=<)ULBfjse|WT@uskUKKQ|YvDFeZ<S%=zEX$8
zcNWOHa3md)n5bQBa{D;jfy{Ag<{M@woPDt6$e5Gc`s#dJx<PVJ+NQ1B2Qk5bTV1)x
z?fkv@A?TFpt!-`jgJV{@oX2C08;$MUEs9n%>zBe^oqK;<OifK)TA8kvZO13LQs%|v
z^$<vHQ_m`<VaFnRw592pgjbgU7eRXMQPG7bQvYp&O)jVg!$3w}uZbeH!URCm>=TC$
zNupXmrH&Q2ac_=(-;H8!x1|||M`a)-h8w=6ybL^ysFB9>08#gXm6kAtVb`8Ldf6e3
z#*H;99sy(PIA&_IjVc$c%n>@$2`a?|#RM?z;n--JUj6D9pZA@%itzS+KJJ5Dm2vL}
z!16Ewuh?PIo|)KlgGdB0k;R{~nr_;9s#wpgt>ao;>6D)P>a3r3D8n9GJc~0!uz=TJ
zGME!<1P)C}R>1`qFbrhZgJLt*@r_$t=S%$QrxXohZVz!oYd{>+*|TvK;VS+3ciUFr
zz=3<ORDb{8P{CECvy^1^Mlc4^%G2H1!2y6qnPn&LbN{_tEATHq-rGd$x45{-u$S>f
zOuL1JF@1WgDGdEJb20;kZR3Cejr_pE@Q9H+0AiPNk3HXb7Y`$+k9DJT->L&pYyW}!
zT}~!x(38;mX=GcT#YJ6MynM_vKcUgsC3N%Ft?|e!Jt}f-hK&71_>K=4+N=PE5YP}e
zsykfl03313HW;9aUVz2p7cUxD7O83cAPs0MK@p<5)9Sfnzf7P&LFI>0-fB_ZTvJLD
zE3NzU|3cXP#7H_s=|rEEOjMg%&1c}II|f*Ox5K*rE-?(Nz+mib^>$B2{<dST@b{0;
z;atba9Gc$Q;l`79nyqWXKIL!<9&b=au-Z62y|Os%F^TKY5Fi$#(8Q6(c$MTE%byYq
z`@u&}n~FHiuopX^YGm$O2P-S{EVsWoF^f?v5arHEwV7*4W@Rs!EN*n1D8hKU0Lm1y
z28PlH_wR4}Ao2d4mA4J}!s3NO*JYYspn<}c-3B0HR4~5ebyilhZ4MVI1|H`DxDfJJ
zzx%b=W4rB=qf(N(>fUFo%>%e(23nz;wnl}U^$hdox?;=xy}jS{SE%@NRwI$Z3=$f@
z3l{~-C&vlIZMJZ6;3o3ofk|}+T?a0ZlVJ7VH$3mp4_O9J=aLG-H~R?|hy6rC6d(t~
zTsen@L^~d&_CVXdTQ9@=iRU@VuH9_=e$q_~SpkhV{{Dt)=gm;qN0lrREXTfLhhX8;
zq}K0G<AcSV3B^oxZ%0-@;U@SQogQUWM%vD~mzC9`O;ClGgNh8@Lm2B@p=olc#~p+G
zLzqEPZ_|oP@k(ET-kWG?dHLr1o2jkLmdEnyF}13{#_cJhB7S^9d<4Gf874*baY|Zo
z=mU((3A^8tX%+~q&mec@5o;3zi;wET^80;EYs)lF6*C>lC#STSbH01O)ct<kKrJt`
z)xYDtglx#Jbta!fi?{y1i?TOl*KMYH3DtKLokUP1+;jFCi(rJW$0Q&<a%+?69}aG?
zBJCHBz3E*Q#1o=^Bi7sfN$ycqRaM+JUu}cYu~F<$@^lY%J_+7y?A+Wnma51mps<Jo
zwpFg5PSEvb04ii;o{O(oDu?V6q%J3s7TR3qJKd*D^UQ-M53iW8;rO?v^~;I)EzMGx
zfNMy+GH3^hdgSoo-NQ>))=zT#F{Kk49?qJz@1BC3RSx+pP)-q`QOO`s=?3^4gInym
z68fd2WC)ObZMm=3Ad)Wjy5+jJ)%()P{Ybl}MLi=TZlmIb*?OfB*=~6>i>Xw^b~r*I
zTJDN>5C5yRo4Y^9)FiYnZQjGQd?|zi=@k3n!!4Yekyjd-*98LEi=a{yoqvVWnVOz+
z-`-|Jf^8aYQ~FUhmEo!%0k}mN=S0gJG0l7@@QXN&yv)5P{F9;npv*RpKH~!D-I>yf
zK>vp9d{?!j*1i%wAmquA*SBxn8Y73&^|g(8Nj#^X_T?J)=_S2jVxp%Kb(jc~EL#V^
z%e40b@9~$uT6>?Bq;$V6DssO^8an)~I{93o7np%d5lI@OKR^r|pK-i+zM-N&m?!gm
z*Ug9DHmfEoYveoB@(B)H4*AsT*ve~Ag(_&+LpKE<M`g?xokc_(EAw290!L@KwzB9U
z!Sd2?b=kejIvBJ~yZH)O;jcQWLW+ZUds9_{w{PDbMBYbmji0ig*Py7e>af2U^tR%}
zZ>LN1t)ldGt=cp5%lf(smKXl(uDb!YhTFdT;|6|<E~1KKpUHfF)cr~wQjRH8=b^eI
zL?AO>Cs&77TVszYME=NC&v)Rdwv`L9StDlop2H4wOv1@}M~Jpgow_cMNeenUZgoi-
zB8@<^qFJg>W_A1_FE5|x0J;wflxb6o3^iKn%pACkEB?ZL{J1pgJvot3VcX}=Jc;xs
zeD2}NG{X$FY0=PlYC$1M9UX7&4os-$#uc07C80S|lZk5wvWyr!@}UQGUCrNo*k;z2
zd4n|_lGsCd^s6i0Uvj?_<Epv&-1KoYa@xF&kB`Uj1HIH6H0$5DUATNI-<=wg#9qfF
z>#+{iN11wx+2_5Hw)S0JwkB6Glrr%dUgapAY6Nb$O|%P@xTWrJXI>T<`_UiJbmSEB
z_RV$ODlLo7mmD8(?56@B!BxEQ>A}`1hibbK*OlS%B^433m2An;N-JG(0XF6QyvMgF
zx7Z86|4eo~ZTT^~`sChcNVB)uhJeuZxD!~ZJeaR@E%s(}_Sg6Ca}Hc;KAx065_a|h
zvsyI_*f(t0K=3>$%arzu%*6u*7AEN$1MhWA^6~b*9%EuN)%WdO|Hh=k^{2;ypjkin
z?33BF$z->Kj9OyTPG@<d^X1>aKHed~gmr`T*4GH($lf)8W7kWpFZ#D-6_xc!c{=h0
z{yH`|M=cUt{pzzV1H;?MA8HJ;Gx^F8J=D(!;!$88-5IzrESld0s=B&N3Z?j}Xx?d?
z#H5RTrRx}4^e79q<@)>RsHv^XZNFNuGCX-^ZCYohqoWf(hdr>LaZ}Z8fywNPFV55p
zV8T*O7RfDe+!g(&09D42u4Qf9xDxE<E;P;1i?~#`?)kzjuyUZm+Pcq;{qg<X&)C27
zR@Y8adV6*ENjS~KNR9$xrtSUo>1?FV39ZC)51&3<8bPQ%^UVsnOVq7hGvlG_E;68h
zn=!=gCB?ZULdv3VAq$+rkh6^T>*Id*cib*@xu>Obz0Gen=${Pn8?Ct$ut!D2mZK?r
zPM>m`vh0S^_33R<UoI_ik{K>TliU*=9JyD^b}=)npU9yx;4tO<TKmHe+6;(9FTG&o
z7bZFWhPvXy#f!typ?0y*wr$UnmXovUUaRJ8;0MoZXDF6_Zc&B2@&7)$$`IC)+4XJz
z{=|s?vRuu<HDSIti`4bqMingej~_pt+N^*3_RXUt1f|W$)#Z2ompxaWJ$Z6XQSk!+
z48ViA<!D;($wU}r<TDH-IKKTz6l=<+$f2b^%0$&AluwHTS`3n^h~Al0TE-;5JLyL1
zJIT?C*T-%SmnxVh+<CPr{Ykms?9lWF)I6Zvw5}l`p30~O;%qe5;Rrff`pKwYeYE^>
z?wZ11-@PXr3#1l>?c7z#)*y0SsP4I+pURVwbtEY{d3o(6NJyBS?B2@jNGJ`LrX?q@
z=71-9M124sG3>UKv~(lRlC_2b)_Q58SQXWG9iYwIIKD+pS|@pV6;Sfx<H)%hSlZp0
zerE;IR<Q#xPMo(U5qr+AV`cU|=gz&#ug5Rj(|v>Ut8oUSXFLXv8R8W;3%_CHH})@7
z0OuC*#dCkUiF)|C&5zmw`!kZ1f*e}`92ny)FpAhE0KL$6NVIN;pe0=?&u%~TP_gIL
z55ZS#>Un<!6Io|%g?B7&oijvT-{>n(R7AvA5~=88wXBND+B_%my#DR$j8PfQ4l2PH
zxaBmOS3|{J)xyKW?Itl%NVHw;#NJ12AKnc@$7S68@gAd)Wf+*dci?}OfiEG6I|(7*
zKDmXWwwa;vVE_;(XYNEqMRACTw3~m94h#&0j!@F4<;Avr`g(fDj>RrKyZLs{UU1*J
zlB4lT@oK}Rbr2}f_A15oiEVI2=BZZTl(Dk1Vgr64W_EvKW0>0}=(tW+KN+g6y#_R=
z8L+DK?V^>rb_?UC?}dgG$Rq*`Zo)&-WzT@k7f|V!)3{Cv>Xq-74V<f@oqsOkzLxLe
z;xh7M$BtQM4yqfGSN0Sy0Cke?ydl6*=kM!Vvh^S#P3?wuj8Iz>Y(SnKfKmEKOCYC5
ztppKE0IrRAjK@P|sDbU3_UzHaMw^%d$DUkCxzmLpl^IK6k@+64O7HBBoMhkLKhSx2
zogirzCVE^fri1OH-VVHXTj*JaGp#2xkGM*i_1Q*dwdCySG<d2iqvq@bZ6h+CuK>&J
zXaw{<%*+W;PxZAyS(3&Gz8KRz)iJ9PCA=hM^DhfbrOBMRYU(-P>t5=vK$*5p^yrbv
z|8_LZsrKelQ9Ug~PGP<eg5L6UGi<iOk2{S4GdlIYkQ#0p6(`^>e&b)_FeYdTD=W*E
zxMk~B5wmpwn;w(UtW>9)-M)RO*x}r{&$dGqKu=n^S@!K4yy`3=QFL9<O)iL=lM1Gp
z-4g=f2R_{XwsY1wDHJe$cv#r2#(4U09^KNx?{9gdM&an}xwD<?5gn6!gL(6qx$21=
zcUM>V6+gXY%EJA;IaYz};gSR$8DptMk=QsHULZUL^mNQZS8*P%Y5M_47bgHk^PM;f
zf~#H5iD)2bD*-<{?eZvR2ea^P^_XPklV#gf8)FsPx!3CDdGLgA{Gm&4EkVg*r?Eto
zr%@FUMhcSJVfCSaqMz2U)l}f5YTD0pr+yU!79~gbS8mow&NoFcBe+q+mXw~{<uSW$
z)bWu(^9cPY{FZgwlAv!sGQg;m7+}wXO6w1I_uh?np$n~;9RKlE?~Mm@FBV>ZpGAj|
zaCIi`RL3=VVEyguia2^O@Q_{|dPLic$_JVUKd9|x+dY{CL$>Evp(UcRa8)erhLv1W
z#|NWy)RxIB?Zz2|Ue<L<G!YQu5E8)jc4c%z1lg$rwNrpNZS)5eLG`ec4K`^9Z^T$y
z`P6+6fBKJG;6<Pze2+qisXmkF9|4zfr88R?Y9`2bIwLx}Z}mPI!*NtFG<@7CV28en
zLw1N}l_6r62+g_&EoBdjxt2{hqWF<aElhQ^*oXPSHDPBr@!Jmb7578*1OY2su$w5Z
zO#bJBCQaYN=j6p^UjqR0KV&!2{YkxSW|j~KVQ5V$=UVpzI%qz7P!oF_wF4Vr=z3;k
zWOVxJyEh)GBSS;Sh&*kf<eB?qIMe`^K0>%wizy)l=5)15l1?lJAQQPw0NVV{T-%Br
z>1v4qyat(&A4$7Nye%kx_~$S2+QlArn?EL@nl%GXQDNDN=K3JJ=Q!NZ+sJq#F8J<-
z{tut7zbzA}u5kmqK~E~U9BJqzj@6`o$4AHToTu8K2%XmpRtY&!%~pmt&z?QI^y8Ut
zRE4gN&Xi~oW$5F*2Of9Oc+=@TUZ9q)|H7zUvw+19cex~i0hl5IZ;X)YWln_}IM4bk
z%2NP|8NeDL7E~sZ)XvO}n@nE&n_wPXbh~+8<(TWLF;_nKM{fFC8ET_X-|xM|na<a@
zuhMPh^DCayb|d@5!~Q2uMrSAZDsJ=C8+<^5hnvS8i~DiUE7{m6#tN&T@1ALF2?@PA
zq0Hbcy!B~g!CV`~!wd@(1%?Tl>)pmAY}qI%g3%!Jf`PY`Q!~pvSe=c0@uEOlV7^-`
zp^}wmHMo77{rK?;OYhO_JGvRzi_Dw9Z~}#|1(qT`+JX)WKNKULH?Z!uz(-p4s4Wi!
zHrlOXv{obnME$7yY-2NGT#CjD>-q$Hs%x4-H4Bu9OnbGML>*F)o6iCR>wk>m*`zfs
z(#qEMq&HT`pB(@>^BoBZ39)Gzt;!HH&6#lb^)*6WHu^(KO6o`^Rd+|uG!6Cd*?D;;
zGlSP~y?)Tn1L?&m&UR!7tw=|7PM~l>PmnPo5DuZ(LA}il5JCV8+C6}YJpB{7>ud8@
z_{}?7x?SypAgla7;W{@pKayOic7%(ID^CwdG#JLSPsXFs4s!g+k&=n6bO<dffU%6)
z><B_~8ErgWMvFeMlSZ#h`PgbV2J1AV$KrNwC3ezDLIG^K?w-6@WD6K`<7_L@Nre)%
z)lwCAaYLNaaa)R=mM3d)HlY6b8gyL+Q=BJKw2P%@S};6|uX3}jKer~h4*nD8#&L->
zYdTl{<OFeGOX6;3d1~aNcxWqd_WCB|ueY$KQRmk81Ar_6oXS{lz}ps7f8*_~Lx0@!
zXSx8}hTVoTFg$|Ds>$Wd-&6DssuMOFsCIinoIO0!nhqq(mJ$W<xUB^0q*(X$<>~A8
zN#Mw9@fj^8HHrXjLRsQ8c+mIc%_d7#U_`j<%<0#GjnXt1*?i01_p#S&{&i?*Xipl3
zjIoP}by~I-t*_=l11OcZKs0|P7cP~j$bwA4E$Gs@<X9O1u?isDIG_;U+C>b`{)v?Y
z1g<#v$Ft`8OtZO?FX)mX{8C#>xPZ6P!)u}*f~2?RMN&Sc9+Nl)el6l4#RGVBJ$g<d
z4~9lj25-L!Ebu!76XWGMGeQao31ZY&Pot%oA&*J0NE(<qfOiQ>hXS$7KF*sN#!62{
z*O58B-OJ{%G!#AClR!6$RAUEGCTQ1QlyVx1yjLRr2CSGih>Th*>x#Uqw_yrR+Y3bi
zS(>;DMoy?_*QB)gBIbj|&<hYDbgDGZ*7XbwOeTMLNmnkqPkh?yfrQKwvX|DRu-vRH
zKSJn(8l53CFLTgYdzvjd|5O8a7bGXx3|*FQ!G9?y+%UhfGQKdmYcuB>o78xrhz2-?
zs0t+A85ShXlUjvfLuinWM<CxKWRQc{6vQa)SwiKcwlYri_w^J%l3r<99B8*djux-n
zm}w@_)_)%|+YI}0mg41784y|WA)?y*SOv}VjRGO4WGJQEFRb|PXQqPO#k84>Y_hFD
zq%>tA`tV6D^Yt}#WG&tyx}q)%DJT=B_>U403uJ&M3o?IiwKy}>dxf6r%p`+|T@c6;
z*J3>|G(hy&P+Cf<p4hv%yc{SOazYA00!lx9dUwpt<}+*K)6>_#;ti<roof1;l5sMw
z1qlctT4hsCs3Zktnk`>DbTK~;7^c<}d*Cz3HCipt4TMXU`XuY>$}^NAH;sZLr!qLX
zzjUm-_v~@iTLcK&Smf@WXSes+1&e&1YsrPe=P-Dy%-5`6;OtUHv!;Tw@|-P&jE=w<
z^vHOuq7BU!Z}_r7RnRqTU)+9%!l^}ki(pt95^oCTIbbR#)VOWTsX#Gf@gsH=)ca@`
zILIhy9)x7-u+$z7#Tvw_##~#I;?*Ryvz?!>fYPM~Bj;tFEp7hg7xn`O!dg5HniAZH
z`u(&rMOZ*C6V$|T`@E4^N48X+eOb)8huc7=I^+4>te0xVemz;cD&ewV={g@gd3(`Z
zBQLJFV4eg1cW>XS#@$H0PrOm5Bxov=amx2D-zc=~x!=S44nHV-=f@Y{`<o=zvSq>c
zrQPJh1h@%a3uGKF;Ru^|!{73fnkRaSM}82}(<1j!6m}+~Evab52vu2K+A-Xk9*v67
zG&>PzSF3q`dIe`NYRh(J!v)D-u~mc}ChlTe%rt8~ffn&P?hL)uee2@apmKs9Lq9k9
zexE$>^GJl#3zsgnXHWoupsOSX6Xh<7*pGQ1CfbppgbEuH83F`F-KYf)93r#Vn6Y}O
z{tq{3C_o2As%4tS9+ccdHdzL2szfTRe*H9+*QLeMcBrG(QdGTaGujgXO=9&IpuxGa
znd7c<gJUaKk$NPa&%Um8LQeup-mbs11tbg6@ka2&*@?JM-(*vWhD`A8LtxIY$jT}`
z+?GS$h#ktO{rUV~1TF39QWP>2t@S09B;6_WTf%H%YJT1?D@%~|!{5?FD#7207Cs&%
z8eDwl9XAL)yk!omE69Xt{17Js<$f&;0X5Nw#?F<4y~9rZ{%Gh^j7!$IemxCvvaZmp
zEcE&jNs*~QyD#N+`}sbwO)cDR6W!tJUKkZVT`rW<h7t&sfFKI4&J+z~l8S)-MXM)K
ze`C28ZAZy}{`pIyMxHXBoS-_=3YqHqgnfEaS<oK=L(F?J2BajfGnY^tAjHwImCQre
zibmbb&^W1#NdQ+2s)a&Z+NS76qVfwCv5Po&r?p0*E_wa(<t<^kZHKaYpI{#LiG2or
zU}_q08(gtjXBDzM19_z)L`Aej9t9D7fTKAZ06L7L&gRrTjctpY^^`i=4Xq+yUc#24
ztxmpvWVt#~x6G}#0v-w<We;Qgsul$WGsJ<j5!$I%P&6GU+3s&0uL&={qNGK%6oETz
zgh=0HNn8tYy?C6|JWO&wlT<++Ai=<An1b@nxwzvjk-+8ITcF`iq`Ftc)~4y~KeYhX
z1JBW<`~KW~D^zF1LPAtZFIQ=B_~=nc^W}g>N9v5=KZX%mm7uSm60@7~q2?IQ9|7S{
zJXZv>_LI*bI%~@yeFM`4@FIuB8hkEBaH;AfVH*5^@8=N29`wFh#&migkxpLW{+>Y)
zLyT6>wOnU2O1&fug!DPRq|!U2jVd4fJ)U;E|Gd1D{WKXJB4b{?$8Ju*srLOkt%~C;
zYdyM!#^Efv>Mi}K73Sgv2Hs36S;u7X%eZV$sn4NVlAM=)_b@Q>c(lDeeevStL=H~M
z5T;+9+_5Tp`)kD&8JX`Yfyf_S*A~f<R_fRoP~v<hFmm7H7pOU<FJG=1tkt#Z>}q@{
zSh*A@`N%W!odvXkyTs6{xt&ChydSlR!Yh_)=!0&jw{FXSF-vKVC;E*ptj~{2gk8O`
z_0*|TGc)zBzCl5zSqVa=Q&0&}yNu9@-By3yk0;ps?B_G@`}}Y^sshD74QU*Z$+Z|}
zqO$`yk?BInjXGR_=b(({m=N(nHwfShBlLjeB&pP_d;`i%01)VjdjFA(5i7~KmnnD{
zazp9pxrj4s&+`ol8GAjtis3TQTsNU0R*fsI!cIcia_^5P`ZR{TO#P1y=bKiC<dC^f
z?3E6=(7rU|s7BAJ&d$@U4}@;95YuLR`JHA4)kCaHd@4>LCP4JSL(-kXi!>$|t(8CG
z`&%eDbBt(rV%H~{u%Z1`xN_yGB!yMPP6k|=B22uVh=vkvEA!{e>p0*!3xzM|#4i<y
ziH2Vu?})1K@$s2$x@ob;upK^npd&I+#QG%L0k;BSaa~c-Cj4lpa6PCe+;@q^kGzCF
zxZ&Cw%b(^1uj|*AIt!w{wFJ2ppJ~h0yah<&(2*14BES7j1jK@!Xr+pbOLkk(4mK|;
zcuOcx@c4^up<e_}hW>l=dPF^0w)((~YA=Yl<Dep%>I88jtL3&B2?3ZvEMws6GF=Vy
z6G7vJ&z`g<BB~k_yc%Wq?2Rt4=SV58hfT9^hZXhk2Z`7xVSy~C(Jd=*QXf-iI-_zP
zpgDtppclKeTwL<e8hda*K&ys12#+gf>!i8*^S)~08)Joe!IF-zKKIGP;`?1w;`mql
z)YDS1V}FTi0A>QNeppZ$w8-NunoujYOjw!UURjvT?e!FplPLUwL7o=?ot_q*LsKPD
znlDXPXS<9>LtDCaJM&e9DqpB1$Hg%jz6ot%R<2%!EGU+u+<_%*CvOJSjP|Eq(a;Tq
zS_cmvH9sXOuT5A~pOE{^jgDV~l_G21-yS~|<e<<YT>bv^*VFF@eHh+9$#EPV2L=Ds
z(>wuJV*QgoSdtN0Efk;%c*Y(+OV6w3K|u?2XilxC+LI=)H9T1_BjpVp6g&9vPpaR-
z|J;5(g8ppmwrzG|o86o0^Au9E(u3Rzl0&rih&ea!N?~SafBLw)R^;&+cB#8mL%$gX
zj;yV9-*_9`d3%%8uTxIqEaEKR4GhFZrr%b(=%1qGM@K|l%PfkDy4aa#-^>>3^6vBJ
zb6(2_BqWkQ%|#1NO<7SgXuDoZUB7eZ32x9Ncv>hSF=d%2J#p1W$%2@BH>t?YDVTD~
zr0IC>;Ja_AU9!q6Dmt6Al$84ITI1q4kmR04Vp5AUX`&&R*O`Ru$@uf1zoA-Nrl=?9
zW~K|U)w5MpR3K2YyJENm3#(glQc@H4E4qK&(Sh3BTf7WJKl(#;;AfNMg0VU6spHA{
zb)zfDBcf2yBrQ%CO$~?70(rr%-gHHp5;jW_463_R)1dqOFyt#&kvuD1zit8~K$E!s
z(Vt|!+RMr{SjuFfXl(4PVcXcq!Os2?>WPPr{G1}pZ1(1uSDEY!5oXcaY;t*3Rnjyw
zkNuds?P!}Uq&pSIvK~gy&6j@rMg4Le(c@ATTtAB@H)m#dPZ8`({i^&+5RuHp$@5**
z60iMW<Tt#w%vysCT`#@0!&5IZvUGN&A=ZazW)85xcE^(K!UhT`Qphp4vwuOULdIxZ
zP;L2Xvo4m!(bgmPH1l@k$;PG6nHt_-l1C?8uI4<~aPCEkJ!5MjbESx?z5#8TME?f_
z8z#Y7Xq+X)45&L2abQa*<3hg6Yy{OSKmHEeSCa`XpVMpK0BG=A^|7OzFx*2gSVby4
zefo6nT$@CUM&51$6~Xhg53T^RPB=9YsTq!4jEbh??Ca*<!E5tp?Yp)N1V1e=zw&~?
zy0FW2Ud*fPd8awSfj1BjuO+p(mz0yyNpJdnInDcnd8bokv^~+E)^}&cvXjU`ZsP3L
z5l>Y+Bu=3vx@&WZ<B~H*cAT&9TTigA8j45#=V;0cQX4{fNi3>&<v^!cXKB8lqq;6h
zSJc-zstiF#8aHASu4d6D6=mfp)pX5T^dc*%st(Qhn|>#q`TOClnK;42b8<i5CQCbL
z5$xBTAwc2#YP9qB-@|xxFA`0l+S)yYv=jUOgDpjwkxbJ~CdY#a2NArRaMI}M(JqGw
zWp1<x4l!mJ=q+qU(T7+YTo{@M;$#DFXBgI=Lx^bz5p(_kXt<uyK}CzG<NP>>0JJoN
z#{O`p_b3Feh1VWz4`>6{@DoK+T#J@il?rte&TG=cE61bXp97v5aC(l5i6IDDG;JxP
zhu02eXy`RFglRgWl2j~&cZ2If&m&vU*gSg!aJ>7lttzlB3a>Q@9z1xK98`bl+c&e_
z=x(@w-vuq|7oaAZS~|PTD}^XaAOkZqRoj03RT0_5Dc*FvW%+1kk6PxXDI9_)9yAO(
z91`;#_u8^7SlM8tP!kqVT);3!$6rYzlS4$%Ari?BLIo*2a{C5i*#NYYR_7i)e7H7m
z@tEj%x_;q84)My!3hSLnec9;RnjI&hlO&VqTQ<$)K+$}G(rh7=c(7YrJDfPlupG-U
z4?e-l%If=i_wm1Eh>M*h5oS?`m$|6MV&?A${3tYq+7G`m3Rf4(!CydhAR&;%)Rt!G
zxq`TOg%p0-yxFMy^)aL?4^R@@g06;YT8iX4@A}}m?+aJ1^c<2dhCwthlD)3sqW)Zb
z=r#170Q!tk{0GUPTyl%f=K6Pp<zwqJsx#duO4l#bP*pw(4Nb=TIRcDJ(h*6;78;@X
z1mkBWNjYi+RM=iUyiMDAD3YEZe22m!fIFKm$M-{qF-pL8(AC|p2S&Rer?Li@jnM%t
zZ}+dzcoJVi&Udu_UG8x=-Ou+Z@tsxEOykP8yk&~8kVrspQK*vH<RV$iVa0Uv$2h;v
zmtUtZBsRvui9y|mP2MiA1Ltz^c1%6|2(`DZ`$Ryc5?YFn_FuowJeY_i>?i^r5iBhj
zPZjj!hpzylzLsU)c{^PxbkFG3>(}2wXc7ZRE2{eb{rfX$H;&2AS3iCFk)pDlBD&9>
zdV0PAT-3gVu!M%B^{@xw%3xvY!0XHQgAiy!{!M(`|Nh1I>v36pr$$s!S$P;0)vMwj
z?$_8*LonwMi*Li|nDww><LY~l0PTV#NdzeU4ns-2dfc}^lJwKC%Nel~*-yiQ{V)iG
z>m?Y9*Mxylv*z+v#{bf*_Sc)B^`JU~>RA6acnhbI)H0cVK=X}{cO0q;u){RMu%mK8
z5jgG&aj4@}q28n3Po3d}dLB+M+U)VTx+0|L<D#NGw){P%|LYf=d2o=hehYi+IGWL%
z0V$orBF2r(CKx}$ev88?Mh09sV&`1&rt^c5j|UxVIIiZW+aIbC2cKRp;5J7QLih&@
zlKB7fA<F%T9b)JfC7Y+{=2j}55x}^t+PochIl0iMLimne<uap=>^tzEN+<Xqh_hQq
z?UYnhj&pIzqX)PFdRPL?HNgR}`NKgEJx|8<Q7^*3o7>0W)BP{|=FnfCF0D1r=+AWy
zF0N+WPW%Q{>WrJ1P5xSezyB$ut7`N=t=C`wnvr$G-M|0bzx+RZ8#exzmWO}&2ZkGe
z`QNSCYJU0WnfsTY`q#gP{r3C+i-Fv(1H^~_pTF)NJwtWifBrVUBYT(Fe*eo?0M-A$
z5I>ja|BHnv<oiebyW4wRp`OoaMu=R*1Vaew!&0D-_q_Ov0j&9MY4IQNB5ZQUKexge
zZ<~5qd%p4qootL^P6>yP9f>T^be-MIxc}$d413$%^&flUOnpk-Kb6Y?KQ@f-g2r(u
zDsU{U=dX7Yuwm?99D;wo3Ll0k{q@be=^g$&y@4|u#)-EqS26$Bx#<?{_!l?MpFd-$
z_J2R#E)+;-7#Kueze-L2L}B68&%fx!LJ49Ka|$|jN;9nXAHVpwzyD&+pD~zt!Jtk#
zmq9h}!qvI>i;f>}dY?LFSJVCTH&IpoI`8q<-~P{^0dKfusk%*nN3#g1Bl1k``$!HB
zjs$x#uq=QhRM3%f|G~|el$0}$jyXtG%mmtxN^Rckh=`Hg49}4x`^v4XwtqFx5**Bh
zC-gA^0lC^*o~g;nYi@2KC<P%@_C9Kse)ld_hI!}3Z{J4y#>b;aMr8E#$CU2enPj*o
zLA;fqZ+Mp+hjgQ{R)#cuPg8ZdARLwqs?W1qjk71Y278<?e)#AT(Jbw)2=`@5ff(!=
z9zVWJw$amz^kg|1xkJofc$Nb_pY^8;Y=-6$D>vwFyi3}Te^$n_%qrPh!6gwL6tt-*
zepE)95`$UtdU~V1`8Hd?ScB1(FwG8GgtY1Eg$t**@~-|S)O+VY_Y!g94W6`HgvP=j
zf;{87zkL>RFvkKHE32EB{vZ__YXpOtsOtE*xDVRJYA0_@SoppX(D2uQ4H|5zc<O~K
z1LxnO*=fX9tiUPwJreA;t8-s=(S;~pekX#wPYd{fvbuVHd-bzt&)_dpF;h%O;&T}6
zzJq6hy3GjMv}E`{byn$SwP(1yXQJwvhYItPzS7S{TnRa$Hj@!?hi!$)Q0UdG9fYJ`
z?$U*l8g>IBi4$As-sO=-4p|P|&eAb%w+5{s<Ctw@L&G5MkFbMcEWEEgbfY96&5)G1
zw`1*g1q-oUo^p^_mwD}7r&%9O`q2Ry(jTj<<MIuZhu4Dq0_a#-wIoG;*|LS>#EBrP
zGfTTB@;((D{6Aak=U*%{anXDn*F=}h!IfljAQwmF3l#x0#@UL)rEivEp9C@}noh#y
zCcKyoz0Cr}SNCS!`*Rk0gXW8>MSD-4vss-LJbpSyHgOuIALTxEsY&<8PfKJ8t%jcB
z)3muPMn?N>XB+ErTdI@S(2J{T-#L312vc}#x`g50St1?$I4*m!R8H@9{u#;c=YIG&
zsi}9KzL33YWAl8VG7uJAhgisTzx}4vo;kXkDKHHAD4~W|%U@t(OxrH`D8#@&DK2hm
z-<rMY+BJ_MG>h^LEqOeAc#J1C1MLFWU0mJ?SZF581~#Q1+7Nax!;}H=o;Rq*cRzlp
z8Lh2U8;jAccfDYBe|4~i`@{)#l-g_~BQ*V%LWaLk6`A}kBp8SwjI4~whKP<v_!W%N
z2|~tUlT4lm1<c?49cWI$dq8-6!*(zB@m$0yidL6De?9`mL2WmM9>r1Km{W>o&odN9
zxzkn4vm@zVf-RCxSoAt{&1jDIqy6bXUcp6cvYU$<g>VX|qN;4J6kPwtU2yx`JGF5m
z2tF?YNVJrr-`%&1YVhIOYBj$MY(AQL^C4Ega@kO?jZ1dO%RML-JR#ZU&Ycao?P`A2
zuX1VOUhVZF1vhTE``d3)QE6{Z_71WC{00B|2cM*J0G>%Jj(9_!J;_H6eOlCF9_#%B
zEZ0yOUXhmWbc3~1GY3zq?RzuCpy#EY!4BoKe<G<I2wXoApV1?~HLGKaKC8#wE>Gk1
z>8+?0+?14+1LS3t<1w$?91RD8U*}{)Tw>d+@p3R&OD1ePwr!j0tm3`(@c;q^<wGOg
z&o^b6iT-t^vu8hfq#cnioE2J6(SA=u2*ct3k;r%ZB=h#IFQ}-BHsROE=&dhSU$2r5
z3N^a)uOEo`yP<~*lA|Jegg+qD#;vF1e)}yErg8`1P#CPJ(bKbok>`h~f+Id)7cMQ}
zSwa=wKJCN6H~fm$E$-O@hgQ+BEeLTONWIwF#K3FrTcQ)&d<qhJ2;<;VaS-bcyUezD
z`|-lrq%tNVh$tuSl<lv0vl_EFEukPQ`yxHTef?f;pZ9T^X(W**D+|wHAQBo<=d{v8
zC;0X=El_*Vk?Rdm?b7t4&a~~c6?}V+y6i>X<v@W%iIYE13*zzUMNc6Tcd(yd^v|;~
z-afBhJhL=wVtAhFqiRpEy=LPJ!LD$B|2N=SV7!nsH}Wk^`#)C%OM+BwA`dlrwDY*@
zhfl+KeLs%Nd~(1!c3SLT=l`==>bm}bW@W%^5QI!D#ivm1`-XJk7@8T?nC<5`PSDX&
z6OJCW%RBaGRq!zdP8Bbf0!CM@8z=VSY*Z>1x~;0YF7}%$ESCF9R5Uls(`)cGUKO|O
z{@rzXRE6WXh|_gSZK3N{6sM-_h|6`TslpKY>sQ{sb;hx9Z#?8BYGzoCuFR6Mtm|@B
z_l_pA5}%@Kx9jqDsBenFeRwkp>vr|L+|K;9X{ulPgVXFbMkb+(g{7rf$uc>QwEhY|
zhad@le%XI)puM#(Z9Ox#Gj5=A+xqm`Gve@BYc6#Lg^u!V#J!^X_Z(#{0qM;?w4}u9
zMpt>H0gfw}_{<wMQPev(Ufl$I$DD(e-`Mm)(oGo|>0tLYA<5Q!$58(GIZ91<`p{Vl
zqRAl6++_CmseTFLMvmU~1Pe%19401wG`&3c=lPcpRIRp{36buAW>^{sOqL;@d_cY%
z@ktHG-o4j_(_SJRMmdfg6<FESRkkMZdgm@5u)azGJiW>nE|t|xd{m9lD%#*de@uvZ
zd*Y4Mj@}hqRsu3)99T_FPTHT2h%fFsOA;^nFJEk4xHK(m(+w<C)z_+L0MW#M_z=<5
z57arLuI{>|Dy8Y$)a<NDiftfIuRw7waKJODWQ>$Yn~T;DD6|5&KlrHl8pTS>Rd4&L
zkw!`oK9b$&b(;GAemyit+Xhzvji^=JOWz##?PnyrJ77N5C*7E;OFp_>2p9&QC(=d^
z-84S_Eo#u=AcKhRs@TpV`kA``F#*+2M-_!kHemF5!?pfufA_=OvGxsAA02<2VWS%R
z+oS64TSP|aMrUkn43pGxrxlmB5ApeKU$f;yH$<huGT1p|WT2ACW-RAHa6OJQWKYc=
zv?lV7Ow|(Z`A{JS*Q4aMD42cPT*0Ne@&W)u-(334%ov(4RUV8`H?MypnP*Y(sbj5k
z($Y>5@et44Kox(Wi8~JcnO&3}tQItl=<=E}&N*~x``dDGmj8T~RZDaGYa-|zLKg%L
zNQIk-y=u2nPVLe5U|5W7Cek@e%ap^hF)>#kSy_G1AKeBzyK2-5r_Q$aLcMXKb6teA
z&5U7eS@o`+YB?Rder<lvki}S@mNqwx?sF?SjMpA~M;-l5M{Mr;W64KWu-sB7lfjA9
zZl;$}G&RjfQ!5}6B_*ZE&!0Df*}Q^>Ik_)@EVVqhpU-sA@u^Yk_3&_Q;8!n;dys48
zY@??3_05ofw%0WgKjCG2{=x-{mwW!rg9i_KN8qHwuvCGA{p-B({yz@Ahu?ETxal|V
z3oPVulKab^5{B)M-d8z0;YtF?{Sx;dVSNYEuR<p^CM^v>)<c5*2HmFih>qN#R-Mt@
z1=!r3Y;*qnpFPtdV%0naR64C`M_}=3@_u%Dtkc=(>&qQzv{8h}`0zLVcx5T6R9IKW
z>Q%U1g@Lm>6Q!^4y?m$}bi4jPdUy4WyPGbX7#k~IeVJ@a@tiFH7%z1_%Uq0>YkMnR
zGnh*NHW{^mt5lF8;1lfr{rBz;38<QcZP;Pe?Ee1y_kw6W8KFHpcD!QbAKnP)S`zUd
z_lK1ba~zzNk+qz>IrqSBY^Cw^I)8IVx2dkwQul)_#cS6z$@71Dc!2V`huxF)$Du=e
ze*c~QS;@PnPp$g<`;W016cMKktZ8tc<7o|Y5bqi2g^?3_1L+yD%LCG9vta3o5Yr$p
zaWd9ceFkkgoDj9CXP5=P`}pzJ;u1?<k(R1zEU5Vl5GFTQ1s64mv>ZEd;OhHJUJ7}3
zv3Lo)%%V!=#JW12elpppF)lR2ZIv;Zl6m8V@O;N7yf3eJ?{q-ka{w9yZn0lXE$;sP
zjb^063({{~w8ke}f~h(E!y+OCs)jaG7dEV|wt62%#(wsJN32%Sy{C^K6AuD{5!~Cv
z4ez?XdJgK3lrGW`nVc-{x&({W!l%!quim=V?cQEVq^EcvXu5Noa8fsE<d6bOY~|U`
zB$#BYNy0SZ;g#t!WRk%E4k0o}D~ScW;QUvq;7114YuJqsH4|ai^%5mlGJ31w-mMPV
zWn4mnqWRbkhysj1-FJ^q7>Q}u13zH}wu+%j6@-4wtf>8Di62vWQ?gcKhKWjJu4hv3
zCs3uYgM*Jr;m|dI`As3HnP$(PJ$Q10ogs&iehmh7rD(qZG-V{TcJW2-863ez)UzNE
z_Uzru!A8D|-Vasu#TmaLM|ya_d>ON0(-t@dm=lfj=>_reCa>S-Trz2577=VQ&2(zs
z4|5GbUn=usVtaP(9A;j}Jr6~Z`ALnX0_zot*6!S1U3X*SfStQ;ip+<Dp1rrJ6>=;C
zSW4Ha7MYMhymHxgpP4f<iyo*6#VO{$_3>7{?K`jpkkAqjHBoal9rl*P2^F&~HU%MI
z`F*fX(f<B7$ZH(Ok1NPkorUa}zP!ARoGL+-LqM93!MTc9!5H?RuVT`iOx!-Vv)U;I
zqfeel;moE8+sW9Ewf9mKZ`=qIb3QfGX|J{3REkoZC{&ZwIQINg3-B+O3dXW;L%Qik
zk6jEbd316bnZdL$6}PzfCvFW;S}qQ8oX1r-1%IKsa{bDcwqskVFm%$SA%>bpZ+gI0
znIhSggxh>>;iDXqD%zb?7^QdHVM4~+ZoFz@>0l%+Q`2DnbSYywvNPi{&(T>;KSUyO
z@dL!}qLs9g_<qD;S-qT`N04k1@5`_Xtg5*`JSrZFFOTd3Iwv?dj|9QE{B=b`);LwM
z{q##gxr+`Cf0`G}a(UeK=_Nt|DsH*pdSamqmd8w@=y(44=u!iN`ODW0xtbKXDCx%W
zo;p?jJC#3fu3+J4rYJHh6_`AA+SG?ata&?5@W6pHNd6&g@<#h#te@sm9zh1GhxYYl
z=FZf`!%f{_={s!b+1YO(IU%w~x7Dh~(iar4&K7yJdl`U(@UF;v!;Z<e%dwZwd2Xv_
zM&;ujx<9jDk28GJ*?ix*3v|oo)HWI5BSxXG_{;B%4nI)om%;-?6XbnUp{p}e%yhA?
zL-4fEYj^TQK@AW(JKU61*!f~76&k#3EBOUur2WjJs^MgdV-Q*UzRbAqE6-AMQCBmP
zN;w_Vxq93*?EL(dW}%)>jAEg0C!QAyLsrAi+(u)Pcx6p9TB*vYKEjz+wxEwgvdDgv
zv|+=^J-h0!Lu*nG+HR)&`1(~NBPk!x-`L_6qHSQgEsIDRrF#MkH8i9_WR_@fuY;f=
z3YRO?n8giSY&TQQjZ0irh*H;IVv!;e?d#W5yuH;ZLDpMhva>IvMoKVi&(AAk*ts)q
zsNUj^$N+$9c6bh4yLN53;h4suOCiZGn3|2Mg1i(#-5GQue#0eI`3PIqon^;cx56Mu
zhy;KW3j+5aiTd<#i$AyaQ>^H4rYx2ucv%ejBi;f*pQ%FNos`jqtkn>=G5lNx=R`2#
z5kWMnuTMaDJU=x+V%>Umrk*ak;SpqBaX(=jj9vKvL;%EJgv3hEQM6mTuVJ2|ih75I
zZks*nWCK{d{@M8q6ThDy!oxJDY5y+k5r+|+W8A^$HxF%I47`jGA#A%ex{u&?hZ~RE
z^gL9+>;Z1UWwF7C>f%qIPUdf;!sw?29DM`EY7EQtechlYC6(BST@G4U1YBu>(INsf
zQ(GafuO_OG_~dy7TVhV)bQby=i7rf4v{t#py`qZS&S~2k5RK5DJUBRjZMp)0XE3vU
z?9}E~bjgtK1QUgTdutS(xJ!M!Ztk%vX<Ena1%N@KNQ-jnq=p7Q;BiJszyOvhfMtFf
z7hgb~EiGk~jM9mB|9j+L_wL;z9ud@SCe<M{1wh1v->wwlCuKw3;@ih3ut4pZ$Bf$r
zE|5bdt`T_|;sX4G$oo9U_Z)YN<EKhVZI3-Y6Ag|tIaVRr#<_3;$d-%Cebl2dsk&@H
z!Q?ISC%vt#y&Mv%XIn(w#7OThJT}i8l`F2O^&E#$$?q8!p-~Vh-2~B9f77BsXQ5!$
zTRKT`eT|$eR>sDbr3Cy4RQP4$b$Aaq1s2J27R+#<SD<;6v=Mm_oRQ(YU;>jt8Tew>
zt}KS4(cE7`AV=`ae}XM{eQtpb>J}_x)fBpBMrWAQRwN;fY|JC=&p*E?XhvgUctma9
z_*hT8X5DE@GsaThkzKp|$fQH8r771o&_~S=EYuk~(FuBZR%y+2Kd^V|)I@)qO`cX@
z?mt4ETE?j@p8Tboy6RH7{bAM-(KNm#e+Mh+3a^3qh`?Zl5>h>z@dB?L+7-j?E-ne%
zwwpu3$ZE&5M&>wt_&okqf?RNJgRqvm`h8-ZP{N1I4Ax59cii!6&om|#`UI}N?6&PJ
zaAtaN$(Y*yv8N}`=I9fuX<tY4K_KPMHi;lvRWP9)6@fp^s7={^-o{AjdHv36Nl8iD
zYB8@|+7h1mL#!HiN?2(QGIl+F{I~&>_prc9b*H_$+hPWh;w&z0aZoBkBDA(bUIy@x
zvx|v|C{Y!WhgG`C?86q1k}oQW&%J)Vjl$*bcm~(l?2_llj|VzkrbBJM9Z_*8s3PE%
zvD`pDmjy@Ls`hjPRsvzu+!})2J3G>PX})9nF>X@O{7^sPTM8`2>m9SHaG4p7i;rqP
zJ&trP483a3ok!94ncM$H;<#8re3|1Gntc&Q^+{G(FwaI~^fu6&{P^;X)@fvUiO6@X
zZHj3JZt>VJ>&^_O=Kgp}$#1jwIjZsQrukxe`-H^2?)g8H@~4C~9C{j@=GxE520KNz
zPZUL2w(2#*6m`-zgdPGe8{lQQc@ESYsH!^C*5j^jQuE83wyJoOnlV?)sqwtW9ot6O
zs?YMlOn6I+LuJrn%CVK|(Oi4E=I?Lm1fNY`mxP&Hli0lIFi%5O=Oj^Oce>6?BEO8Y
zUW5As1vrf&na3%Ayu*?FV3uY5lBcMaV5iL^719nCmL%dp+`02xWn8eFy*pUPdfVpC
z2m%qMOkV)xyf)>xH9wbAV$w<c)Tt};o%8-fj7_T!uaXelE|PQlJebU_u|8wtcSXjs
z%i>KU{`~Vime|L<cwKZ9{UJ+eonx6DcG}j#^y5Ea{ksfE9xU&_Iax_3L?)9P<2`X1
z6n_w;GjGrb3`I*PhZ?tFw&{3f+N!trcRKxn0hUQ8M|-nifB%l#6xQE=kKxfh>R+Co
zcB=aE5`oBv#b)cj=fjZ*8J;_pOf3{%eZ!{rMOFogM7pY}s(LK1bIk57;c?r-t^2$3
zwQJ$b+b_LOw!rME#L%0GWuG6NlPsp`7r2>GHcNEch_C8<^)MrL<&I{G$bPz1QgQ)G
z_#;bG6{pp*Ekl5nnX6?g#h-t%?@nQCM<+F%fa%28g&pXQ<9R3x^I>}yGAobHbM4%B
z?>>)8ixH1|ebp=8tliF>5}QbSWT?%=;%c<qz%AkC<$GNd4fAp(vVyBpxX)OYl^`-6
za*meGyAqBG^6q73S)Gw7DVAQND(dRDjf)WjQRXG6%#tjN&7$Z(w3s%cCFkKl^}0GT
zt0-i@fu26V`XSbtl@&hPpn_V6U;n#<S1A1V;?mOUuI^=F8KYU5^uW$uotKDu{d$gN
zSp%tenVY!V$_3O_F=b1TW4wcSNDi>KxkPe8!t2U`wSWVBd@^vCeOaal@lFI0$u_H?
zq(G@-w9M81+SeE5$hP`4F{hb2KvQEp`DR}p^F)1Qe^eX}>4IU;=VT&HnXQ*cg*$jn
zK`UpfoYGG*+1_(S&O9CoB(E>#yBSUXu$Y1C`7k;am5|cbivk6`uA@WQA~N^>o!anJ
zMKZrxsENDqwPa1#;gwOH(&sn%Z-2GS3Pt9QcjM&>cPnj1!LdJ*vkv0ITbi9_)`y%(
zZb?+V`4lL1g;4QTnboAsxj-ZUv0N6Nx!<_=L+b%v*UL8BdGQq>KmJ=8>C!^ONURtm
z=m2C6t*;hI<nE^z%g{nzg)85xty-G)AnfRgkZY#_wgB!q+hOt}4Sywb&mwl16CK+2
z+a$9k3frxS1V>mTh{kEqH!{6Nlsg)MSa$TizAMuWOG&wk{S`%d7igX<sT?n#ZWuja
z89W^=(Mb_l$jHx^LGN8HxDMaYPzzyBBrCSdqr74v?wuOdTF#^Eyc*+8cHf~F`Wg1S
z9CaJRCE4oz`<L$L?ke-ec1f^x{qbYx3|WF?lDlPkfU%WC(z5Sbyo(a-moeJEkt|_u
z1c<sI>mT^&3=|#|rAw-<*Djo2nR_XD=1jL#vb>AS@fZ8FT~cOXV0iWHS+{gkiRP`<
zM`E*EmgmyjN7L{>wZx33)_rJ{O)6SDTE8g@xUG_+V#~-sknXV~hd)@Y<;BHaNjGqh
zL0?c@c{%3vfDs_jE(M{k!P;KPYUqG$dV3c1-5U5V!8qVJ*Xl=8pRO;Kj4DMmsp88M
zdXvGL9aTd>vBc(D3TE3v2#U*sbha+_j32<*<^cZVK?iLJYqe9iBQAO}o2kuxrj8yC
zwqG;i7;jDY+PLY(d<wiOqD!6?@w`T5D+m=vZLqz#VRjjh{`VUvHS=qJr<rOsU_B0&
z0cKHsmO@YyumFAg9&g4h-r*pD<c%5SqC-#-t_7NUbYohIkh1Ui$h04mBEW_I3U`~X
zGJ=akUYC^pLl|18&!<VL%OZjlz*j0#Qcu!XYA=oRG|Ye8B)@NrjuYkLK;?4&wPi>A
zgpO_{mmvJ)>$bAy$3ib+psJ%|qTxJBTO}Uq@88#GZ!_8kSbJci==t;DCB&WJ`E2kz
zZJDyQjVjfaTfTiT3%qWyiX|{^=4`wQlzlr~w<@AO7Uft=)M>3*6&?JTARB0hvQpX3
zPT%MGZ?pVH-ltc-0RjV_*$5;psC^&O?pKGZ?YAW7c&s!G+^0TzjQuOKP^Qfgom!4n
z&UV(SJ8zK5D-g)<?m>s1hkoe&&H(f~d}{6&NEn~V+M*kY$j(1F&vP2wQiFx&Q5pYt
zT?N%Ve@+n?d0oUYI6t*UIU(&bR%pdU7RVqj#U*9FElt2ZEbv?sMk`lwZiyUKK`d#$
z1>MDQaEHR&B1Xx$wbk*{0iYg{!hKX77#~l*_P%rwXxXXnBEZ}{%&di&1NbS9kVv+3
zlRiIOSBBv>asATv`>9(!)O6^1yXEv6ygEnK{Q$KS%jg>%Je1$u6)7#K;n+VL^)VO6
zsNs0>O0ik+v16m1a|QcFGAR{YWT9nm7+K>$XjpyQgD9qJJiofkn{lT%S2(NZORBOr
z=JOyomfT7=rsC$71hDZBsc07#JA;}q(m5_ci!StdyiG=c+boDNo<@T;ucB^cU>Bp2
zK$)7pN<zDp7IwH#wF_rv%*~f?!)M@_>3EiIx*vf?jT%TvmC_#t`kH!n3ATKf3|N7b
zGyr-D!;#_$9K8{C18=R<vN$nnQl}&P*$1osYV+b}fj{yau13k^e7A977D~|~a_*t|
zKwRIb)?Rp6pTB(hF}^E<uA|)cB{uoO2E_qOAwK)DGPOLr4D09AG&FTD4;BY&rzVlV
zw5hvH_M2DpV46TChShZEU&QrEkfc#^1=p418+E(ehYX|ZU4!e9oYmXE_VXJ8b5RdZ
zOPYREX}P!oXnP}Y6Jfhf47Z6NIPft?6M4^4pU*sO<(0|&7l~w+ph!xeeDmSrS6_x>
zlIk?seZYm`CXgvmnGL&*+Ys{5q(0pJY1O=$92cJ?_;9cZv}(P)L`_p-U=Vp8c_T8y
zn?7t>#tSEjvK@o!I^ht$b)lC~l>X~i%vOTPFS;{tdE3Znbt9DqD<kHwp3d3OX59D_
zjNQJ!yw*#?&HZAAmXy@Bf?-S7y8>ufl4^3rUF7Rs*QL1D@0b3M%!KO9C^+~8D3dOu
zcCg*zDpf}m$}{y|z?j0c-6SNmaCp*N&E-L(hq$j9VG2<T1G?KV+Ep#3Te@Jn%EaT0
zxD+}k0uixgY$GFW1!QnhzWu!J3Eg5NTWG!sJ68RQjHwwrAb}<ydGVM_EIF6x#BBUD
z-4;(L->=`eaii?~)i)=XKlQGl443U;#}KJtqe4{jv<#=}uIi^N!BJ!_d^7a`gQm_k
z1%>y-2LHy!dTKM#k)~n!>0xD(L^d@&l;p&LVUT3^JUmJYjWh^xlo7ErO>VZ&rcPO&
zEGu!EZKS99Bmqj0sPnP@??y&WBvZy)YFp?4({^~Q?{BvkC|LNB9yJB|r(gw7xU}Dx
z$JNV2H)4qSSxJC?7&B8pd^nFTRc2_0nWA*F1pqHIio3iH6bOn$S0>}<^$1;UJ;-cd
z0y`DhUk$mdK%<0Sd1RDd;7G?}JZ!;w*0-=LGiLVq$agiuRNl1B<KCu6Z#4sWExWHO
zq_lw236~dlY~GE9#$#zjuwx5MY`ZFsfDz@mY10Fl`9zXKuU@_D3jE&I&Rn=q>fDC(
zj=$0`sH2Iyz+qC5V21?E)RJc@Doo{|piNVH*BuP&%YD~t*H@~weBb7%*yVLPikf%j
zUxTtSX6VKhDI<$tEro0MsHhuo1PYGx!d+k5qY$@>%|y2wu_kKy4zG;fPWE!eHD@BR
zBSO(Ec8cNL2p#lqI}H}JbOU+Ghp;S^stE}xM981%Qkw}^zyR?06z$xw16qK0ILR^Q
zEM>pQ*VPH<p7eSq&HXSLVIutO@>OJ1VvBtb2$X<#W&FnC2C><O;;NUaq^i~p!!10k
zAA<cD&w=Z}VJW+ssb9Gb*43nr!hB4?TU}}=vDDt%v@A<zwdeZ9nqJ+0h0(mfJd{>f
z9XtZE>oD{JtOu2)2m%DTz2r%d2h-nmiQlEooY_8#JT(&3D$jn57Ha)aKU7$ScGalg
zOY-wYae=!=;S&MJtVa{=ZN_;R^@_6W8tWTisl|qlKsUj@Bp)<3h9kaxX`s{5?G5Uk
zqu2W0Br?8IZ>g>f;Uk`PeO=^$2^qSI9F0fd5{?0nyb4`qa&(B(Wyll-f=I_X$}@CI
zti+Z_dO1$=hg?GMsF<hYzn*{M?;V6TPww~KyKi%dO!jD5WQz+qtbB@H!uUF9UfrDs
zYkMp)ImUpWGDl6rC-Ff69?r?a;0<Z(*VbMzQDKNsGLQxZK;@@gGwnt>puK*t+WZ&W
zJ&brdQzyM1pLS~gEE|prnr*lg9M#ob(mSKj(x`#!Vt!!}fs2rz1eCMM`0H?Bat+A7
zz7aTi!_C!j+bjY7i&!8xleE07ft1uZJ5(Q{6cA2c(-_Crrq@ZAOZzTorp`oWeu&Vi
zba>=48>A}{no#b<_0!}TpU_bE^dV|6k+QBC0NRj@b>Dd#5WrZlIB+6)UKXSkAW}W{
zib}C}$fu^WWe}qDE1jx#*9}Nrxe}nA8xirvY=LCq8ZQIOk5jJ!$m2k3fBwZftPAP8
z(YAWwTBHyiTjCslBzYCBuLWW@of(T?YWt|uWQl?7>PP+wPRNyzmGi&ev%8OicGCn~
zR><KsaQg}R+5;b4v;c9TaJd70xE~y?M?dMK+=voq*;QY+`(l8%x3SvX$9p4clrCbE
z3G)FgHOo)~0I$Oiel8)S%J;atKx5C?{9_;AK<D$;11^I+d}%2uA4hL6;w2OXU_V=I
zvCI1dXlw-D>?YeAh`D%J_5J?OuOkC%Zl7$rnGQw%@KM%FDv3*8My$bx<SH%O!IwPe
zd4*b5&K+*HCd^Meo0@a1Rf-*Ke(>xg-rNk^+f8za&%>+BN@jq`H68mMy^4k!8XB@)
z!;vz?*IQ{CvqO9PB36U^eKEVr`YS4OW1%i&&5&s81vG0ojA5@|rSNw^DlmgSHKzhv
z-7-ypk*L;1Iq~$OVTPLV*GXdF`QcJ*5%iPW<d1K%4mx~NeZgW6J(Hv^h|l}Y?Q;kc
zPWgLbe^Lv)SJYDqjRS+JU1+_x5N6HxIL{(MPXHBxCJ_cE`?Y|k4f?8t2>Lb)&VT^;
zw=bb~Lea<e>#y8fTO6GxKKp>@o4#d|NU{v{_m2Ra!c<;}z=r23NST|S7ZhI@8PYCp
z%NBp$OQEzIQrf{GV&upjsC27lT0w5i0%PW*{H)`t?%KO88Qlq<cR&|cBwG0Wibews
zs4#wW>j!|~!emIXEkIw;>Jhtky0Ky3rZ#jn#Lq_V#W|uAwTwo4RMPsIee^MI%57R^
zp$6{N3a*=C9?8&1#hSJ6t}nDJ<G&k+nhTUvytONy%wEnQ1L6XOWs_n05FJuYK3~UO
z%=j$@+xK0O<##Vb4?0D?3dZ+&<9i)u_Y-j55U$Rw4L8|f;~OnE_{e?;!N=r{?tPOp
z`fhH8NY65=`oVgZH*ki`zsm7Kl^I*rPmtE3>nC_$V^|scf$l8&bii)yA3BQG#meGm
z)i9gYi1~{2@~GaiCr=V(=Y1uX2F;R(HH+L{T#<e;-+SprZdjAs5h(-}z|%O9yfg7d
ztE1ZWsl86)?fiVTO5iFbgMrnMor*-G1z6oz%!8+0mJ?4u=i%i1q}Y^aFH!uVxW|%d
zWuVF+^zEikrOz40VT3A}Byp1KJG!iDi`F&f9p+Z&sb$IcKc3Nj+}o7MBwOa47gn~b
zx&*0u`S%V=-K9#d-BzQzN!rh%jX?z?X2;uxpn*0vze7mg)O5w@G#CHtro{GrQAG<n
zcERBmW&aO*?;R9X+I5ejz78{^i0CLvRE&s%h~%WBfQo>qU_d}YM6yT@O{0zql2lZb
zsFGt#mh6l`D@qQHL<NaW5E`1$K;LzAzVCIyy|-@F{qxsVQ#ERbbDr}&JFLC-+T|E|
z(Q<M54%Cu2#?73~*?TJu(*N#Gl~5;AO#n!eY;%Qc9P(aCQU~?!6JukL&s08-(4KPA
zMnR3M9vv9FZ!RzBhT(+ydYPq{aW?D6u`Yp}{Hjh8uf#%=&CJjT;imj^uuv9C0fB+`
z9xJYp@`zdJ=x93LH!G~-`NnY<fiXVXWjgbZnD5If0+CuARynu({IO$K5Yx$)(3gNj
z@?JlgfFX}LL*#qcneq1ZHC{5W9c{Spcy!IaFn4lticYZtBgTnl$epC-w>GXCisvzX
zQEY=Eroo9n?R_C67M2x-j=s6~`j!Q4-@{&$nei<~m9WJY-Rh=qj$XceI-*q&gRKA{
zYNoc@W$GnnWOS9V^<>@<^v>-fB7Ypqx%f60pc25DPYc1Q2_i>2O7M%`LhJPyvr?8Z
zSlgjmaY?Ep+Oj?02HQC869GHhw*DT$p6lC2G3w&sHJ>9~GN72U<k8a^7w?^7^n4zY
zJ!+7u58UuIaNiqLGi*_8=QTzpcVk4Uzde1rp?;Z3p-nKH0{U;_s%921sU*$8Lw|7>
zESYDDA!zB0V8fZNzSXU;apT+FWR&Ys^!}{Z-q<KZ5Ea)Avcd9^SG8;0QM;RrPS~RB
zV;PxytlBj=R}9JSazJRG1j1CDjH3Nc`E=vFWqC;nyVFeB3rn0(`e?sZB<Nxi(b$;t
z1OJjh$Tt6c*8$CVrH(oZGED*;{d}u1L1rt8+JlplnRcC#XQ|tDP|~$OTV6wK$c&7U
zr`ahfq__-pJA~x4Tn^o)ToiUeK}qS4l`rzlb#9^MOD+<Gu6HMOkXeU}w$wZw{_>i;
zWBvy;4fS1pUl#rdIO~r;{UjYwoyK}DvwnTKw=}Ku1`xf^edeBT8!;QKD5<qxI)LTi
zE&0l(r^3w0?uIPY&@}gi!^<jruEF-=cGhrfUcEp?dxlv%ZCUauT00YkOD(gdOJ|IV
zc8kkS`B)6uql(jVvR7-vpuMq|#fl})yfQ2PVst^ER5lJpcMaqiF6~&x#g%$WaM#&&
zeU#A~M}R$>xUOvd7Li2o44*n<;k8?8_wHke1dV7sE6;l#OH4}2*iWl9NxzJO=w86i
zxl!hqMjBJjR2PsEGUXfo3{2wV;>zi}6Q4g{{5q@PMPcuG_JTE~ud=Em9)PY~{QR6}
z52~UsWz#QJk{?8NG`=_ox+eOHgA$-Z3mhBhix2^VefaPsfO-7Jy-n10aYU*P2k#nA
z{`l(ItpS@>nS!FeF22ysZ+|(a#}8}}zjolo=>xwV*t%s)*kY%_`(Yl<j@<Rq7vmsg
zW7G<?)~HYO*tr|_aC?OdE6^H=U3_BSy<`w8=v{t-w~kR!<7s#89wvwaAhUtkTpy`i
zkmX`mewb57X7ce$-jI*I>#CAyk}$Qe6lU+|1r_`t-dKJqIZ1k-xQfcB80v<%0x_=7
z^;7-nLTLFQs@eG?r7@dBdICs!ARM4T$MxwsdbS9}fXI$Nd^m$bdwh|H6p`O=*|Nom
zG>U-Du}Xf)ax>7u>OcPe8cJy!!S}Kp?ZEJZ<}-Ar>~FwuD1EymBxHZH%M)rveeCz&
z%VivSJx{UZcbq_{m4kLcQy)e+Sszfi@~U8ANc;*abLCeeiTb{U1u?xM+-zW=o$G=b
zDz37GT)7PHmZ(rDzC*D8xSWT!ArDI|+n;^kDj~MdKD}mlFF2cFy%s|Z&`wHLtvcK2
zp=e0CaBj(=EfxUVi_)s4ch;MvL%2_&B--qqTrTzY6e)AWLG9wj2Z;o}MJd@NmOL_P
zG1Xb~;eWUQL(WN>rc>Me%1rXrp-B;jI(@{1WKZSfby?bCcw%HeSBm=ihWds9L@t(b
z={p|=9T+o>qK+y^5`<PDe4k$O%inhRpGMe)TkhtqTeRfByDLpO&O2pK?YBF8_$}Yw
zH`5=-!Req+?i(IBX*43fPcp@5kvGahw+4bqcWI>dh1qW5(edf?&2_P=mpcmcDs#RT
z%s7sbCx7}$bo+LtO*upwV^r<&`OU@?V05Kyd|}Gy4S-XNM`1V44Y|M?p^gKF1<c)9
z7V72V7#cuR@SHw&!#cRpQZLuGXt|l#sf8i?1%M?tZ}X3~Vj{dqE`!*&6@#lEJ9#dw
zKEOtjuI&~^Xww~Nj*ta2e~`?cI(*;^=)sz*Rg}J*9*}^T-f62}*KZb8Em;^2dHnb!
zT?y&_>`1{)qA_BC;OZmINAtVJVd`}eY=H-0XlXv$SqB(6Y#95Q*KS90wS91eq07Fz
zR>CfF0z1UTZC^-IvrA+zK8>(qO{0^m&4Dw@k%WR>Tn5kz4cX4QZMogrSFiFDb@7gn
z+z&}kU>`vM>Tt6DJk@kxBeE&9tYKEc%JZ{35tajw9juS1#F#G9o|$oLDRhg*ytbxc
zKOb#1q>*3uvDAM!@-N+0*PuQwkHv#+up&Wy;i6^Vt5;9YF6l+r-3RNO`m5TLGIuj!
zT7D_*5ifN@^vv~p0dO>~D3_6o%iG$ENnsTgffbjMoo~${g?L+CZ7gH(aI?eZ^C*ZE
zdAV4;u}^<dv(Dc#{d9Y{6yH=~L%vf+t7*QtW{4NXjiKVAooi{PA`wwBy-9FcnzG75
z<lywER&$coK6<)o4U6N|>)Z6mT$GW;1KOj`E%|v1L{B5*vq(<!Io1gBRCrJ7>8)S<
zbCDoJ^T?gT=3HO#cMa^8XQ-825%&)W=;J>2w~hKr6Xa<QukMix!8J86+#5g5dS7sI
zdg!twqmiiXOMcB|;-l8StFERru~F&_?L$|p#ROAq*DmE)W+r+RID64DVRP4M*@_iS
zDCZS$^#M9}$9~fm4X31k<58BwwAAm82n|(_{^$~2SlC8)D=G?d$Zu?LW&hz@sKoHw
zqP;vraik}NeF~k0<4IMh6QOFYK@@3h3&)&6XpI<`0lZYd-qW!S95bdI`zyBuMG7L4
zbMBaS?VjfY@L`$|vMo)b{|fJ(reEgfD=(Pt-@j{l{Uld;;;skumjKT~Mz<&Q+4md1
zsRWH77U(h4l1;Q7>`INcefdd-sQe)zwS8pztD|Geg_ciOTpN3-ZVu#z>>%0Cn0Bh4
zjJ63bg0aJwvXGGQ_y=Y6wswimB9D-TQFi3yj@^~j)u+Hn%Af9fhk4f35DpTz?MqHc
zsp(u``hYF^QIEg8G^@dfr*EKEBZ^=<TGrTz@7k595tWuU>EJSzOXr_{4A+s&(00&`
zdL;(ZYM)Y=EJgO{ZK&i{t+#274d1<>p8#vV*<s~{c<q5Ivdf6|axMs}h15HzqN&B@
znCXe|5N-8+`>v##njiRanO{P7XTcBKn|fV469Ni4KMpbqLS;$$>8%5fQ`>YTCKa-W
zmnC=0WzbB8*Y~9+jf>CKhgpfz9Ioi<?k~!1bXp$Z<I}}`>>s^CuQZ8<qq*KMp9D^v
zfwFYb;EyY0RD3WAmWT3);1t8qpDR{80$~@=qFmFVW?!OK^lT@%4uFylMduiU!k)NO
zK|viT+qmV7&yNlU!g6;>6?CM&N$5Q|hAyVvB>mH;6V7BtCQmInpmpYJgUa6QhK3b!
zoF$9GpP;>0%WPz^88RS9l_(R`F(|`7K(jC?oQKZrd~}wMp&>WWP;iLMYTaaX^Ns5s
z>t?rG1M{p*<y&W=f<d(U9LoWyEJSzak{KUMWEb4Ke%*iga^{E7N|m(4M48{VHOYq8
zOx_e2L2LYhAHxg0^ulHf!!KfBA;6%AM4cT%I}m9~tLlOACAb6qPt1j+Zc0bmnwgbv
z*b4bcr2mu~N+c3}LA1J!%0JSl>ayt9H0tZbgftl;P4oyD-5hi?=(Im`hBZ-hz(o`R
z9>K+e>^X#_8qS6Q{XrG#62Xl*i%e>O0ku^Oc+<g5iOm55ZpG+#IyyCN2$&NR!s^gD
zBe3VtcKO$aE6<UpT>RGd$|UH#>3CwxVy4Dru&X;FZqv>*xh-LDu?XEe5W2P9C7<JZ
z%FW}V$<`ur);q3u%XRxx7)ky9dsb8_?&-d>V#oDOgD?HB-`VY*F`B(|@zR#Mo3X6>
zdkyc)Xl2UEj|v|>pj~~~y)JH>=)7lIGR-NHr9>x<FqF2H)c1J=%5^2U_B@=Cgzh@%
zkk)p_1<p>aZcK)v#vBfAjfaxK<I{z%7Y-iu7gSWSAW@3*pXyBQmr2u9ewHZeR=91I
z@96^PO0U$+?!FtdvkhNbuV4S;vSr22SG$6(`kGP`JNIJ-+a-bJp>M4mp0W~isVDMl
z+N7=YM`>eDvU1tEkSC4zuO4Y(oDDsEWsBu^^zuSAjt%=bZES36YmP-Z9>Dz3+vbIH
zZ|+5(uyuU1_m#M;Y~Rz-5?G&@EJ26&KS=@{T)zv_Vp8=f4s6>DDAEV$kY|@!yq<X^
zZYWSP+o)6DQQC5<39;y1t{`RRc>(8U>EZgmaEJZj4pmFjul9_)4yALpf8ip%zq|23
zblfEmbw=Pi$vv?)=(mliDna}4%h6(wE{tLG_3=RwsI(!m-n6S!RMNI>di$<jnrALG
zzqtQcs_*?{+0nNog~+b1Ym%5x7L((~i0pS<fGpp}Ex&-gs@TbVwCk<vEX0EN(K=#r
z!%g9YzKn=P{<dFxfh~`%Q*gYT`{+ZK=p^S+OUoRM3!f601NZOO*`_++2a2jPp-#A6
z)Xk&#)9ZrVfRT~<G{aqE@1-2NpP2XN1kGUN1oiXV6Q*<1zLM?}j~`sAfL7_tt~<%y
zRMp}{og(A<`TqA`KE+~uO`QKDG#<P+>igi}-`6+g=QTgB$n~0@1~z3(O$KI4O`c|-
z)U(l2pgahn1PRagvp9z)Pv=<M?=;Af6A?k!YFhCiQPQkp0(3VMVvC6OU(J0dUa)8F
zF8A1a1v|B}TQ7%mqSQ(at{DPG55!=JvKZfB)3)iKEDkKvk^2<mI+#e!R}!9jIHq9P
z(4UpfuJRXnqI7As@4<3fipzEEo`j^NJE&>o<_fxfF6e%Es+a1&USn$|Mzm?R2t%uI
zL&sFHUu*m}Erp#TB1bge-T$L{mG8mAnO-_6pL@lGQ)0$d)57VlD5;+hX^o7Qd7L{T
z8(ZiMo=Jdm6Zb$zr<vI%lh?PL))$AUk2*zGRNUDcHLq?aa9-AHu5@`|_bcX!(V+MS
zmBQ{o<5;d!p7DuEEuj<ZUEbV%)^0?Nd`4Nbrf1>wiSL>|Hyl877xUPeJjty(Dk-FV
zq`9Ee@$<`$%-^~htmCC~q!sz~iYLX%6pG)YM}~)GqcLYpxw|JwQQVN@W9U341bR)_
z-M7tZ9o8Yc?-?m!kIbv|E-6C1>1};F@2XqMxjdy6iq>b3vkdA-{T_<h)g7+6O)P)+
z?pVnBJxx0(Qk(j*0QZuRl5*&0lY-CpxyuSVoE+;sGtHxls~34Y^oHNt+uqW`w~V*A
zt!&PGi<VvU3zfk^XJ`B6iHnplJI)vCg%=Bh5O!&Xj`-H3-4>cX5afRwy#Sk+W;n?f
znqkV9M?^fv*NSpn>94tOYh#Lj8kUp4v~+7XWcB=^$SElzf~=}LtG<K3FN%Dj&J)5}
ze%OsFlQ#qg$~)1_FSUY0K+*XR6&usfZ|><D6>sdGZ<9JEdGFBXNiy|IY+c>G_L19x
z^wF0ifauHc;InkNg^eC%)8f+8CDFyVifAV3q(%oSYy~Nba^JEIsD&hHmS=31t~r%o
z)zs8<I@?mMZpN(b<xlqLIdu9g?@;AmFfywZm0vv6oW2QrrH-C${<O1$*mx?=BPq(C
z)9OJtJR5$sB5}ALk`2B-4Z`7P^Cuc(9Nf^G$_hHl#jn2#VmS7tJQ`beozTmcK5JmW
zniv!ArynPg3_*w*W)($w7`?+ZLSc+iRc<O7sIH9O^Yv!ujQSEO6dku}?MTnlUpHn;
z`N-3^9YgUQLOKIg9^l?9Z(hs+7+&DE@PhMh3xuh;k0f>qti&%Kw(04iFV6n12Xjww
z@-mM5MdKBIqBh$i_9{l3b<U4;-;cuy+Ico>L$n!Gt5<_L;E#qvCst>qrIky}`%KRn
z`k8?e<=kLsXzKoW9u=@UE+rnG#>U3>{EZ|XJf|RHO=IV;agGe%yHfn;<^wq|%%rEH
zM`7`b#r5&R_r?l6nvw?x2bor_#A6RBnX^wZ$dyS{4qlm874A8nc(~q=S7LDQE1Qq6
z_DkBHySkyO&`rlNZ$T?;$B7ng`JOEQDZ8QOG2L_L!W;CBii@lLZ!6#UjC#X5%n_*g
z(p;`)WYl5Q2c*rRZUSO5rp+(j|H`pVD>Qu7ip&zocXj!06S_kc^4Q*!_vy7JtAXXz
znuB3O<hsQ566DYKG=`lbCrsxi{B!LabVmd2$gJKNvfz?ONl7_dD^+2*ZEyaEH1p0_
z^XwE=g_$c@K3c9^wdKYp)e>?!U3~j?A3(#oY`U$hu7>YH5e$G@2g5;*QId6^XeJqr
zLe{y<qm!k+S5|ggb`YG!?DO*STQLLOfr=Zu%^2h3;19WM$wqZ-=5B#@2^9N9X>aD{
z79{Pv9x!v_;^LZ%Nd|SE2(LT3=j6BagtB4PSaW0M-T4ix>y}PvJ=v3O&|TC$V-5l6
z!__nzZOhU~^@|H6(}Sfr443wHMn(+>sxHKU0{;Fo8`0a4(P(_}?ntK6sGxK6gza#5
zBsC;evXDL6_?afNZQHg$#gS6~kWQ&m6h*lIvXAO@csVv3y!aUVawtPAxaCq+_?jT4
ztK<r<4T6Muy0!dpac$o7=Sq+_lWMUwY_FQGX3uq~3^QDc9W?7E+VX;cWa}`Guz}h+
zh{_VxW;OeFyJVg7+Vc8}Rfnz8RmDr@k{;wh(6Aiuo_dom)K9b{UTlRV{V#oy9tbnO
zcg0T2CnV#;uUab2eIXe(C5ec{>8L6lIdcC%3v)St{>STnT`8GWR#CP#HUSc(fzYCn
z*LAU!^51@1-5SqeObyd-{j_>(85EU+Ti{h|wfmx^`ch&B2#b)_|4=+v_f)PFCb|h7
zxLquG*%=BWR7n2_VjEB82c0^1@9Yv(qt&9;b3@cv)JAyvRnJ&`R7VEQOm+JApi5Z+
z5DAINGV~lX8|!4x*9(0phi+_lX4JgN@m7}-R%P?c^ul*NYsEd~tK|Ex$K+giePs6J
z$I~MBeBfNS@AOpkANaB<&>!`T5vMt*D{X>{$fViC@OR@7iwU{+bL09PDDR@YX5|mp
z@7h&xpE(>GvJiffQTg_*F9z`_c}*1<4?DF(R9m}+;&W(LH>~Gf=OK4-JY@00FA`lH
z9^@!pw%3S*@twN54CVkrrP4~-62XryuenqY{ruE(qL#Dn2My<wu)1f@I&X=fDg0pc
z_3glYoSJ)EUe5H6I_6bjmnI}^4}xraZY~$!Ub$I9?zi-(ZQ&2HqQEA;S~yX+%)^iw
z?jU|NPbkH(pcgxxayDB8hV}F3&xP~Fs&hUuR^w1(tvhGHTQ)IpJ68vT|I!}I*&nY{
zf_dm?P@@9q$8{2tTi1g!se9~LO^5S9tZ*Q|?R2jHqmt<^O;hGjeZkyvG+u;E$eR-}
zho`H>kr$Tv)f$4T=1yj1cVxSpO@r*Bsu1=q6MyMS>8nLA!{*tk(avqN2s`UB2I+o>
z#}lunj(Inh9h+Hy*haQvIspE$pD_y1-*6?`D?Y_IG@^kzvUVyHv^;y}hrVsuc$J|E
zWiCBV=0E?NsPDUV)oIbb3@puquocUG{<%vkYUbCvfa`(}9|j!C%iAPkGSWs>XxHAq
zA9i&OXK)&GKAZOFAe_hX)>7Z#Zt%nV9ZB25uN;5>#6kVI0k%b7WLWFKo|`w9<hM~@
zuLxTUO;8=n<m6<(R$G=^(8TZ8jF4jOvvb2!>w>1BkA&A)y*)iuwyfgeJExy7UWOHI
z4=uqEu6p+qr>;6UbdSGNt?N;O_p$$AmdF@7Ljl3Ysp2Y3dna9Gxq#eui+uRdVbA&5
z9u3r&<LUB@_n$we3o2TorRzXEBg%7pC}sdFvkpPHM|&qo9}=;{gURemlzH+{`nJtW
zNos|Y(ZU1Q!xW_4Ctfa57(vvxB{VFU{M*IZiPyo`%j@JvUamI9ILh@lrVDet&$F|o
z6NeL`13%CotM)vQ*VUIXq0n`vLZck(hL)Fqdi5Zu<L9;k%aoEYe>mXGEqtNor*QMG
zUEu?A)amlpPDH7nKbPvAB6(7z`&a8I$(yAVF3i@&48Ww6RYknrf1N6<>Oi58OT1>r
ze0AnJ_s)-5v$~U#QbnVrFI7jbzQH-FEHLV`spH`<3%opIC><OLMJEPJXmnupRDMTz
zcz8ce!Y;^u(wRfgZDuy6uRJKKrpL`TchQpjRxJ@XH%~HMIJs3^?T)l^s$5a4a3kx)
z#+uppJ{i@rw6gfHMn`GvSX9vp;q6#5T?BxM!!S`g?uN!5His*&Vy_<!^`aF71}<81
z=YCVcrOG4~w%c}oT5M#7`BOa$i!+6+cIvQG9`yXnQqDNsZ+W!SP1>v&G?*Q+!xdtx
zO+9@<@E-P!dgO>P$u^fxLj+3qTRIq#^<AV<mY;UDJrHEIim9tbA9M;R9!1iT3tw&*
z99OY2zWSC^YWAqt+bzOJEL$-dWj_xVK-bt<7`We&8S8BGmsb@|og2INz^bz?PiOkZ
zF`NG?t$5o)Z|80~<mn>oWK2rmOqXt3u>0kgU*fXJ%uHHbTgnMTLqP<R;Te&H$>lAX
zW_MW`vw~iJx+Uzm-k(Ohm@$e4vF{|YgX>g0m;*RjyfJMrT?v=WP3n&pWmIFH4-t*U
z&VLRzr=BVvPn{k-RkFHswn@wWy(Bfhon}!Vc*w$Ib|7zk`^re)uki@S)6rHbYqO@5
z6Vb*cbJ~4&)+sunRWOg(8g5ZJBz&-Jo2r{u%P?q2dlzP+*vg<H-fyw8aw&bTM%kQ=
z(Ig^fGbMBHbPgiOif<Jc7h1P1!tu!Q*2qP+NX^FH>KLu=oGy3iHt5V3Rbf1lQ1|j;
z$GDA;k9WP<6r^qGu`pw<&_04(Ir`;Gxy0ebc%jOK640W`9tfvC-fMByb3l_uMLKz+
zw;I<)WJYQEgWaOl?Oq-<RgT)W@WKcj_8i*Bl=)gj;~*U!I>LfOQH?3oE+}Hphm>om
zjGtO>7abcbA4zhyJ;IWvo#V$Ym$G3Sdd=wB!%kLAuVXH^^r-gG_B$LL=a_#~TU+~_
zW38FT1j(T#wCmb~x2F*au}%!$BEs)#@<LQJ%FAXE7{=^Jo(Z9pVLX*oN06f_nw{6%
z4`;JOWsXY7%F1dh4yR0i<fLf3jpX$$Jg6h2OyVcdq<W4YgctRec~LQbo+$QQh)I9V
z=P4R=HlC-6%OCv$wUMJ|rm|^XTOcRiGBBnc<>l%**UdH$vd<Tb-CE-AG%jyj>T}P&
z=}e!~hmgJq7u_R*tV&s9JMtW&_T$W{;HWw45PG<Rle@ow{EkG_y<~&qSQRduiq1oa
z6wvX3mgtuw`4nfql^%cmw5=?gwqR8;wV61W6)%S>=~rZmm}jrv?R{zg_S0{gA#t~!
zHa0b>8yXt2CL&Ga5X1C5W<9q)7vf%l0`bFD;x3bo<o1C)o2kAOm{oSH|CDldFb|JI
zpGsuL0_K2FRTsKLPW-yxB}$P}AU-M8*3pp(!MH;fs*Lwj<*IY9o$Slkj|LE%A0sZi
z+Z-hP$+Piv!fVwR-*%6VVls=2Wy<S&D<6t}3MHN%u?r%8DD3U&DT`N`oO!UJ#gSH1
zJamoo_yJ=G>HaZ2O=at}m<sPczwewwrD~ZywX&^yG`u|PTI>HhA&z~0vjdC0Pqyah
zQ8TNn{H6-~vSOGP^_NOdmCQzLm*`wcSfP_AA6zx1LNa4mqCN*Alo}>jdY-YSfNMwv
zg^0WG$aFFe9w;V^E^ebQW}*_}b?eL{XFA{=eF_V`Bpv%-tdqNPzQQ>)G_)&-e3Xml
z{kwO5niBI@Se3sL9;Q)GI0!a4u5BNtrTzAxr&@s?E;m0R#dcwzkh(HenCOs;On!RA
zr9=q+^o#+47S>Ej%gB^^FS6t83BXe>9t#*%*K2ILY+(U-MR8=>iNG9ue2~OGa5`sS
zre}{HTn#5Dy@Q2oMi>R1^DZH+xW535c6+SgboLy1KG$S&@L{^we2b5(n6)ifzoHk!
zcz949cL_DU?7wuGQ6R$dXGJ!zyq^=BryRsDzG`Jz2|j*)u&)vEBViem8!epDKvkp8
z9h1l(>?L7A%7OE=#DgZa4oR$T9k)ifYu8&*)(jvQMdcBx>Z2=$lM)ks1Nh%bxu+uP
znd_A;IrP(V5dSt8&-GBsaWG7VTcmk-AZX7A6iG+E+{Y)xI8qpTID=OW403HPD9_Xi
z*JLptQaq(lB7a`Ika|8IsF6>Ik^3`hc^45|pD~Z%ooAH@Duo0GuRe9oUN78Zgk_5P
zo`excg%D6vX-rKX(&R0}cIHB)iQnZW8>E7bGU3!-j#mVgE#>vxfL3=wh=|}q9@UYN
z?0IlWK>@a)8(v+(0<x`BQ9(0|s345I-44miK%ZR8>qzs2M#=10QC5-j@L)<5=brWS
zUArm)IFawvYb#1wd_c2j=_IXlWls;k$-75dJoi=u>N%2>e5uZ*fI5wot8?rWdD7+Z
zFkIzWj|6#_j7^e1qS1pkHd_AcBo&CT-e&rv80CG?8nKR}7UYpUH%Y6e#KYGvLI-v1
z8uvLNkg>h2n_q}myrY#tlofPiUl74!9ynzoI+O6Sw>sisW~R2&ctIVbUZaar0lBD5
zCRUeam}!CyK{Fk0X}pJJ1FR7UIddt*+QAu-2wu0xYR`SVF;zZBtv;GmX>{dxHA$zz
z30I7rGMS&vhI3tTX*cbfV@TYAj>rxRtesZ66a5kMYrqjGC@tyw<t{VlZ7{bV&O4>_
z0QbD)BXJUe1|S4P%7)0GuMC4$k2769WRxAQCk+(bz|1P;;x9MJhuwt<%uUB@JX06`
z6Whgab~b;VlItOVep!`735Ce$0)=>Ux`Jn`jcQP3m{?}VZA1`0nN<qgh8-|)bC@=-
zOn9(BfV5fF7)5jcMz7TIuh?vA>MkL#>Ef3tcO0*>kur~51vl@H=?&^666wLCM`Z}#
z1vCW4(jJU@fY1=ZlzMCM$tkD|2mf&ch6BHOxiHI*CTJxYo0fIH2Mvyf%WVO))<P@7
z-D{WJI6Cj|a!P<SAt`#z26%<<GKo1q?GTSoH~UPQQl=)(s+!GyHF(NXb1EuRdE_H4
zeFXf8c?3Kd3G{1<QPCdII93tcmNa|MzCtuUZo&o8u@c7Sa5i>I>FF7C55)IDP}h8O
zwy@i0-LXbW$2xvlTbP52Lz`C-kSlulj<%FYd9hiobBFl;YZV=XIre#Lw|R_?qOxHx
zX;JqehKVz<PS(~l<Xwjo&CaAUR8MpmV2Xv^QTQ13C~l6Skz)2o&dxx38q2amD~7<3
z?7Kc|=hinhtwm*1xVE9;@pv0D?zpy-7&En+xaaY4uEWFFQQBt~Qu%Mpy0Ds&2$;ON
zd*SdR5~uq-E@)pTBsyE566X_>gDZ%6@d$xkwyIH)yPii)LuB@~cBc@>Yv%;Ftnz)y
z8tE(pbGNa02;!aVG12B?$U8Le?^wIjRdm<^t%e11b6+;y|MdYnn7gho6TgEjXFH4y
zD?K*TeX`=gi(o9UidixCqGo6$GF@e+z0=;kdt=(w5!_cuF3eOj@+aLP6S~=Jo*q@E
zp*kxoO8Edh{r>gJI>;P2wK-IeGV>#3J5E1ZwP7uf<i$64*X{Y7dN;+<Dd%f&0y?0F
z=jTo2hvN!}r()`NCnDi|BeyO-F;Nr|LLh+~oQUKHdc9oG{ai~A=BWrFoqitkIYyjT
za=BJa(t~LMu(%<H)*BP7?HjDEutlUJNic3%gs-dE`*C<J$~XHm{wUetf4BfVJV7e%
zWMZ#LTAw~#(Hse+`RL=_lEbWdW-D1JYUVxfo|ceUP2&I}Q96Ftq_j1=y(j>k@?2x^
z5<7++;3dZ9M>|)tr-Nv*|2YoY-tK5d4UkpM<9CfT*ptSp{yLsr?5#IB)C<?_doVJe
z6>lCD!HZZPu^1F)x<1_=4I-91k%RzgxOLF-9G=+pTOC_%ixQyQRCw^bm?;Cq@2r_v
z9KEYouPP|pVfc!0@E-?REiRns4E7r(jfRbJv#%H)|EPcPASee$2Si;kCM>7Zy;}kL
z@NHsIJTlg&X+q6mBY9P5hka4+z(kZPus7;nhP~mSD8QYQpZlhC<aPYlOUZy+S3v8L
zg(WqxoA-*Zu8v?`79h|0ic%k-tN>wt9acoQK_A<=6!BVEtt1g#qm<hDHB()VH2$?!
zc^9$k%zoi;eL5>zKRTZw8M$MJOlc5#?#6UM3F~N`3b9m(0*B;=voZ_L73by2qwY(u
zMZajxycUD1+OY;{vZ(1s)e>Vo5>cB3yYc47{4i1z)b9{V#}jE7cGpILJj-}5c^%L*
zFfbq>(y>35RXfdk;@BTy(J2zc3{q`7$qw_=@SrGL+Dl)`a&b)(2vRv_?9{73spOt>
z$qum-eZWGm>|=HBqYzR~{Va&>GnrQkj}En+;b-(JXLq(@jD#xn0C#)H*qn~4vaHwi
z>rv-fPqYuWU3pzX1=qJ;rBlzRF;45@Sa4Ju)Z&2P#@YZxXcgv0rm*FTT}L5Rv7P!v
z%6!Ys^v$b$U6~);+D8fqm;frw)z7gK-DZTV|HSQ5hOxMhb5wHTk-^g}jD-#%6B5X6
zyJ}iaWkL;uN^G>DmTa+Z8zuH!=2*8ddjtG~R4937T(&D-wMZT)=AKYCh78;Ru;MuD
zX}-}0e#V|r+35=~F=dL?QSMG96@I!!_M;gaJgRkXZE5Ku-VPt?XhkNHZZAfdvAX8F
zG}~g?wdE)t6p2?`pq-`^NL0Y-%u7zWO@^mVAulUSwP3||k1c%OCQH?nQ0`21LIn?F
znDXpLi%LcvBhg2)8RdpZ+o0rwB0MGRc^eDk8*m%t<b}Q|h2cJ6_uAEAP)G4pnrw&`
zrFPPa6%&$L_&V7Ox%ng&pocxvEwo|*j3Q^|(XZsB8b_)0k7m;pRI6cm<ZL`}joKxO
z1IgcZG_svGdn%=%s0~^K-Em>I{p0z~NP~dPO!}ADSzB585k)7oROj0UjM}s&b%%A%
z9U<I&2t!(0x@-w|8-K}MPf&eie7?e?$dULF&(V;8F?1r0PopZ-m|E@2!-F^4*K5g^
z=GZiH4tGkk8LA}#L`AOYF*-)>5Z^zBo!rCyUG1@%bKY^$mF>+m{#STZ-GrTyD4FvN
zcj-_gJWm#b0EIHl{JN3q_=kq3+1>K!f2LY)JXf}6xE_rF15B;(fj~;PmcrzuQ~TNC
z*e#j-XYvb135;B^bH);&&!uqZmJbN5YqA&!gUjb;s;Rh}`knwaj0sM69O!ZdPGGA#
zqB=kDHtQWm+X>f5Iz9bL`5X%C?frZ=XyiZF8)-BbD+A(N`8%g+M6MQy97GMn98O$6
zIXHNqzIUpV>~ivCN)V&EWcv@?LaPw0vmC>TG_w%#!t|Hh>^-m~VdI`apn&7M;x>>P
zdvJ#*0*o_e&z6+Ff0Ef1?$E&t$@Jm9zle#LbeG?GNyLmu*mPKP#3P7Wm{84uQse>B
z`>?5lEQWcweU%W!z+vZ^am)Btw3GmLMd$FSLvw2~McikL=32x=@ns&J9{Ydc<&BS!
zxOb=&LnFEZ6}{FV8XjnpDV`rD`w<`~Vw+}YaSZPLF(n?Qr>(^^m6TE-^)B%1pR*W{
zAW;S-y92cPSRWsx4uefH`YEnb#gnP@Zc|}afi^uB&wuR8YqCFL=}+X`+WWO0yYPEN
z(0DX-ue{2aYux4Vf<XKklnl&mTu;=7aZ;sfffS4N{Z<q(8Axmbb5(Y=9OJ!1HzrZ}
zL1a6N^x|^ub=QyAJWMe9Y}iJSTGMfTJ1^X|5y@%)`$*DR0?U>>zfZSirlqCDq%moY
zeP2W_k-?~wFu-ROQGt}a`njJ7(oBGt706K<%HYJ;5jjaW-@Kqp+uCX+Mm$kbmK#hk
ztz*`X6o;#_XNZS%aYA8!Ku4$akDC(IEg_!U5m|K%xVunTd3}+A7zXn6-B<?TrRj=O
z#p|F5y6{-uK|j9lemhYz1A|*NB2s5hYRTyOON}*mXQmbf1O&9ZmtY2heDT60*>}BE
zpueAZ{@yJwv!k)<rKG8Oosf-@c0tj-Lh^lPR|Pv*EG5Q5D;{cYS}RI$+8*LYsE>&o
zM<YXAx98%a<1DlR>~SYMOY19yQ55^i^7BVX`W59)iSYzpobEZpk7yuV?$d8)L@E2J
zjEOsI?8=1~uAC}==1)LHtYOt4*qzd)yypZUCTKw`xbjKUo;^Q>Ilqc^k!-2;OH^mx
zR^AH<;k_*=vkN?i{&iB9tQ%;wGNfCk^Rtb_8Dct&zqqhPlzxb}*yZVLqGBh@%t{F=
zl1Nv`qC|ls^HKyKV!02a45PUHZ=Mu!(pNNld?YITNP*<4l&9v2*wop**vi&6kYGg^
zy3B8lzGD5~XmdkRIMDUqY`qWEW2DcA1y{_GP}sZ#Qk*`3(W$7j-;3&09i-Du=uNu_
zL#A!FTgx29V@c<sX%q>RkY}kR%$_GRN&Ph!BrO{rZx<Ey4G(W?PB-<i?kJS+=8tja
zS9Z64@L+k+L$S^wCYK+6eW(O^)uaB$2gXo@$<tn<&OBA(HQxpE=*4mr;Q@*h<)txU
zYMfA+z&%MC^_sFDs|{Mvx;?c|B&~=kb(n!jB50tVI|y|N5mXGIrYeL&Hft_=T>*qh
z<X{wpk*fOn<X(U3%*KNr-M<yjfk?V8TU#IfDSftuW_$GKkC@iihpgIGvmg@R)Rj+P
zP);018Srq(q9g6V9t4P#3&Y(IgqB>soDeiPm~=YVRx8)iiv&Hz3rA4`T`p|I2eXv!
z=3sX6r1fR)HG@A9s|P5n^vfqRB5i|A)|~);G3M+h(RSrPENfYFdbcUk_=L0$J|xk1
zkn|2a{CH7^Zkgg@1|S^E*pEc&azj(oL9?Fngp{_&wXEcV(H>lh+L;e;-n?}ady!D+
zd7z<jc<374(ThllP>nW4O&fF*VIq@d^i~MDv5Bw-z1?e;F1?v<bxPB^<>dN@57*Sz
zydYCZh^zhiq_<)=H}94$X1XUbcOj?w1+H&|;jtNOdW&1ahHS{s$46wv>1OYG6VlQu
z5>#hrT{vfE=1l>^;P@xNx&`+3ek}x|bgG^jse)h+?U`o8S~FKR?lO=mL!hF3HGtR!
z{zA%IF#}>Pko0tWQ@4})wnO6@846O^H!*i#VW<m|Y8&-;LiVKvT@?202}7@{_v)&{
z@20#y@aX{2M0)E_q?m|lzHYF#)Az>Q=FiIz2#@?#M}QVP#~CaQtx9Hdq1y@Q{mVUj
zCKDr$D&3#232(1_jtvf6TwLiUWnsjBtnA3p&|ziw)z&h@)x{un?Lt*8r<3&p*Js^!
z+IAm=u_x}|xx+Pl?K}?;QDq^*&dKS3j``WiuOL!I&b5nx6qMKAqCts3(S#Zp`?Y*;
zF@su}E2ENjq9tA{?A}+%zTrfWQ+{N<4%x2G5i=@5M0rUK%q%Vz#}4L!D6gwVfFHP^
zB(LE;jWsnZDMdLG-ohHjWRe0u-Q$E&u?ipr;V<(Z^rAx35_-$PP)p+~JW<Y_%b`Oh
z-Tt%Q`;%5yRzXu_I7Gtqq4Z-?`<!H;Vay(R3J}(+`;ki|0Ug$jOfjz21a~@+78u5N
z5EwB*K2Q4Ui2WZakGu?KP9HtlDK?)aF@G<0>?A-Mkf%Q0^{i$#Oyw6kBz~tXKJ=%i
z{=Qr#)=(Sa#%-f8s#pJgxV)HE>klhz;ZU{f9MKK}gOFH1gUsY}%)rfM#(@V#o^4v>
zeV_xz7EGkK!}YIkJuLOz7Ab%c#lMEULp92WC`BixCRzHeSi0x?64ndypECUIdqAB6
z$i9uJC|`6cfK1WZ_fhOZUXB%4{ni!<pg3(CWt83(Al?@RVpGfjW^U<kTg-8=)S<dk
z^Jfl!pXr+0Dty3v2&1_jjHURUQn2l=Y?g$kMafi$qSN-flHZk@z30D<CP3((<1v!A
zNj&fKfinfQtN>XfKm7Rs^|j(FKZ%7r0|pwDmMCy>YzR1I^h6ky;Il_V9|$a#vug4n
zP=-=W50B1q)&PZ!ios_D`vmSFBqI`zUIkKp$p^04>V8MdX?FQ0-R^ChjEMDX+K2eQ
z%%j6W9SN2A)vNB#{JsYdg0h5YKab#(DF}*)#K(7D=HL)$@M2~PmlMSV0-Wi|!_=5^
zl$Mbc#l>wM$*1Qktm>Ef{vJu&zD*!#HfQvyj{ac%<~g1fdciN#nw!@_Cg(u7Q<EFu
zR&%QNBDM9qXl-o*=r6NVnrc&u_;HB$`>z^V{inn|sR3bfS5B)}hl-(Iwq87#Y+dN0
z_9dcrf(`^m+r&DR!o4VRn7+BYv9^S~9|q2UFe#}y!^z>K{v#@81g=X>O;z}=`{OC^
zpVJn+Rg!XYWROj$LHYRZJ&2uBiPGYKi=G_&gdc%x^3T`DSO0T`fBm;J|2~BwV;{$c
zzrOM7pDtd5l<YrWZx*9>>YuN>OaDiR|1bZxVcEY9m)N)VUq?!K@BH^c694DIul%UF
zd6mK<tnJf~$x8w1B%&Jl)FrX{e^>j}GYyUn0)HU1b%cTE*e5}+<O`TxN&N5V@hIYx
zUtit_pb#wgTXxovB^fA3%GWF_BgS-BoN2(;)`r`}n=&YrhX0N&@b17|mK7I}zV;J)
z&)ewO$&(EWFJ-Ov4u1Xc2imFcc%u78@d$6f=<V%gQU%$jlEn9Ys83g~4{OyICNAtv
zaYxE`wzlX1an*=YTZADSLMN`*+o<OM?fobbIDNZI%<Z-!w}nabO>QJUIz$)y?x;R>
z`H|zd1E&Erz`y$Vz_s7$>N1HSK6zIS{2@L*K6e||x7#R+&$aq*%K7a!Ugqa3MBvSM
zH#&QUgIK@Xd|UYq9<yh^E6Bc4S>%1ir!|i;%s$jMrn-)B&sWYPm&#QgIUP2z>(7O%
zr+vRr%%5;==MWySx`FJ*urFfdBgejKw0~HV+tOv~4gP!>@s!5z9>x%k_U)IC9`z<9
zd$4GwiVNFJi3@bshZG{KJ3l`kN!Q3E>G-#`4lF+XoyE=2;n=Ve>DO?O;)2GXAEUNt
zQbUj0o%s5Gxi7Pp-`|$_BJX`fN{4)_H6E%*PCpZu$W3>>;R2_Oe<`XS3j4apUR`Sp
z`F{DFf8zL$h{$tX&%8aAedXJ&^`CYaIPEte_U*=2gcloqe{tBpD|vX(#Yhxhd3X>U
z*^d8!-|OEmXtfJQQddu}v5%?yb?1M4CAaP`YYB6Lp99thB3X`3$is(f_V($4#IEmO
zBxpCD1`mUkCfN!%e%;|K{BJz_jy`e`XX0slQ>q@Iv<8*-F;!vW3BIsXXgbZuABIdJ
zNu_}D?I9}D&nJDieLvuA9Kv8m?Dqe?;AU=Ymcx?|1G7Vlk9<3*<^ulTZOgCrd2?cF
zY5+mi8^By$j0kJ`dQ{p^f_dk7!v(Pgf@S8+{I^5XOy;!u?!m}?fmIbnmsoUq`ZJPy
zSE;YUQe5!UFomX*I2zA0GRB{NaQSv3<{fs^zS}=bG&wfh)mJMkN5}~><yNgaQGAkP
z{orZM!<$#>>ZXr9Rs7-GCrJ$Lgzs*ZGmvB7hEzm=%`cu6lJXN0-e`4v{V3|{$1!a)
zTgR^Xm=H2o&UX6*Zer;jI~8NUTV(;c#T?hP8=FRa0{A-@mR^;0BUahbrkcM{*0yb3
zcDCY*mTui|8@Ej{_4`k*lScslQ#*%aY|KSh1o?XsZP2x^d+JoY191r=&r$8i0IJ6g
zI0oxcM;rC&{<fq0+Z2nw`=W`I!spMs=uS&&9^Sfjs~Pz+px1;VoBo<-C<huFQ*Pkf
zybqkkVL}YDHPHsZZ8}<LUEWJ3eZ8d^m+jx1#>hsH^qw?hC^h0%KD;>qbp;<+y6SF?
zgP3in#z`#0?Qo2PhMn@mF=yrg$K#iIpkXr{=+ZX!?Mn-Xk0pP%(8}B5v$A$R<M%!a
zt*P?IlF`vGuIxL`0#wk}PYm7>*n^@=3m{Z0Yipl7cLK0!rvp`-zdp2&$6U65|G4K7
z_B3xp(su`AVIDZkx)V!2dJz+EG529Dw(Q|yESK(?Gj4|_Z+<<=R}#Jt(%i3e>^mO?
zn%VY>3iX2*F6^&xu$>@IWrrxV_M<^W!?hfb#FgAZVx(bXGraMG?AMd>N-?5^u;$-h
zHTBrBtkf(=*FV!s(Q1HY8is}uVMSOY?;A(#?d=a9gsPkxm>(64ujf5mI>$D(?#we4
z!tWGj{$(@X$BEVW+}m4@N!`&gF`I`2ItrW$YdxkaJBeQ`vY6s(CvGpO-U3BwoHK&9
zj(949cJ143?mqs#@zLVgP}7Y@5<b9c7Hpkb;yXACV7?MiNk(rm-GBMFJw3Yld%L5v
zisMIt-9+|?Xjk&ed3)G=4Q=f}ZQ{AF_!%w+ziiT1m7jpaj>e0K4DPSS&-=!`?-u9E
z23X6CORu~a>7G8l4#h4+ifj;{RFV3r+1jRsl@Lpmf(QT@*jjK8O=xM4E&~Ap-woNn
z|E*g;2s(0nyFSv*@4mRk;QuE2`aDSZz`wt~nw7u*B@F)m3D*9(C>;MMJpPw0^ygOj
z$j)?#x}dLT&hOnRfAq%sP{*46cYapiziEf=$<oNv&&RhcmgLhM;*(C-JbCmNEffDD
z7gN6<(zpC<@*l05gZmHeTdB4$MylaL`IFJxwQ`Z9xL3!17-8l2)-lqGnmRl%A5ebo
zA0j@dx&L*uzjFWgtf%RQ^$CuK?2|jzVC=nyv$OU^b6Fq!DX}4hO*qrPyu1Un0Es;a
zA@e|wMpvJy218ZOYy3bBGrHa`8hij_q#biS@eNowZEb~^nJl^SFP|s=(7>N~a>wz+
zlLrre?p>f5>Fe_)p9(?Y(RVjKjQFMLh_<#Z3JV&xwvliD@#*uy_ah=!fA}C@o1l9k
z#mI0Kuodu#8@K*&nn5c2g~JM{p)8-Y<u7>4R>H{t<>jqqWNT{#bE$Ubj77@n^j}wQ
zc%hEv%D#Uj_W9GNyRSMhjuKY=udlF(p`mbyVp|Zu_bx=j4{GPZiyJ(-C715g>gnxO
z?=IKU`Ys>+^V4BP#2Qpq`e8tJDMsmP{djDXDAxL5wEEIN*nj;A{OO|s1l9Qh_|`oB
z@u_--)}mt%(bo?)<3S^%;(xA#_kXzfW$xfP;d+8Fd13Y9i<>!CzS;iph}wk<-EZE$
zm0tgkUpRKNuyF2B?D2H#4|Urmco+Y;S@X%_4Ttp~eIa;He|;sugSTzpX)SQ(j7YKf
zMQ6?py8HKE`?oj75^vnTeK*fO5roO1>H$BCNJw-Z{Oi}@Pp|l}ErQeoe&bj?fF*y3
zr=b4&R>0AJE?mk@NC6QB-<M+tM0e)w4jhVoZr>fZ^`9qga39uw)5BF$OXq?F7fqkt
zzyI0cfBdqy!sb@a>8-dr?77dM)v>XB|K&|6Q1i;m=WSi=^W!4#S7eM<ezW->Z+oS%
zp__C14#z%*{ic%t;R0+xWqp&PBK2QxTH!9X>(_5ZK6nt@I_#hKd;0dpc@Cb%9KUb9
zdjz-rZx`pZT~=1&xM;2Mi@eNbuP%v8=u8X$<JwZV_mDXjdB1q_u5!}!AOFhH#Q8+k
zn`2*dxUBcd9T}Mp|F-g+I5zi=__D88J`v=QF@;I^x9bhM$bQv}P{F#K_?mw{l@yH(
z@_EKqj+HWW;YD2kk8kMX+F<ri?8bZYFq7N5*TY-XyK+Xu`<L_oxSP{axQ0u`oR1eb
zhm-%){LgDRPr5(9By2|LJdvyY{dK<m-;p8uzhgcBUrp+ge}#r#2>m<QGx_hhQwrz5
zB1z|!{~a6p|LM{RZ-BEZJ2{xG*@l4+B4TuM_MJOE2e_4$*6uw0Lc6*>K{wiUtgH{G
ze3X6`?jYQ;P877HgWQ~dTjm7X@i_dIH{}<^?+|oeb@S#@-D6)$N<>e@r7*sf`1q_5
z(=Wv+cd>{9`|fho`d!o@BgOgm6VhOH237i`-CQr+Foxve;bx!M<B9zZ7WA`I26<QY
za8(-sEglt_)Q2nvO4ll>Ds~-n$R&-UB~iB(4B+RDYmC=oT~1BQHpm?|0kiiGL`l^l
zuOxzj%ozC2n4YMAGWK>`R4L{w)22hOY0=Pov4&I7@%-8OLWb9RN{Nd54Wm|6o*f+r
z>hg}KBGjH`4)dbM$j(Q@`AVpmBnCS?3OQ9eF;HK!&{pV{xlVrkAzWaZW83uDD9Fsz
zv-|$KK>Lbv&;PCz%n_D|MSo#$*-_{=H%ZZ<*t5Z85JA0=cl9=}l~5kg@ci=o=HMem
zwUo|c)aIovCT}j|EmvVp7(`3j<@Ln%H`x?q%|dK`C3*TaS2iC8wY7IcWXf+icT@;Z
zNKeQ>SC<D#ZXm?gHmL`CHojg8m;hq~??H-Q->&WD*bhZ%sB7=uH8=WhHum8kY!MM{
zrLo`S24YszKNrH;*Jk#)lq?ipuI&Q(O4h#TVM&_fxga6MatyuU%k6M4Q2WPI)5QLj
z(M8VWLo7B%tAPzqGOY@i$EOdNO!P}`z3rZS0WGd7m#~bMo<q!5J7L;6Mp%Da-iZL#
zMKC9)M%ueDrp^bm&ZsXgRF_NBmQU_Z<VCkWAM~DhG3Lq_^c@9a=s3y)>T_d3<UR6X
zPf@HPQ1H4z{N<&>xpA?dSmy7X+?7F9Its>?E|{T#4+lXOKcY1A`GllhhbQ;9Nv{8W
zJ_#<^yXP4-xO8+18+1*Tl&BmRZB=b(@?JzOMLGO<@|O}jF?8YqaxXPr82@eRuKTAa
z=8<=-(q^>4#QiC~(`){@$CRyo^M%`?kF^>;{vHzBh!Lk<&;7);mAw3R<(%%LLD7GJ
zh9GJUB=HhC{~mfYXnu&}Xx^M%?f0-KwA9~rhR2{sZSRa-jlR8GY5W%5y%u_VJqzSa
zoZnuOmF5(3-Dh3oM3tNE7e2G?*a2Q+&kJa$d0JK8>fCB$I{oDWS`FusBbNSW3I90|
ztW9W!9<hzoAYozrL3^k^<xIVkmm%6~4x<HYBI`?IF=@*8k3X)Xu{!Ve-_Le~7(yBA
z<1L_()+>~Lwo)wjU#Q&Ve0g2%-Zl5u7%xa`sSVZazBFMc6igXjm#ITvS*v1~85RdK
zAcLW#LiDAUA78v)k*YUsjPx`hP;5ub4oIx#q1%7=+gCrhU>3Rt)Gg1>W8pWNMs3v!
zO$o6oz!cni_QtRyAPvt|-1vKVHyD9)WWA$eRwl?o)oRkL#+Yl@ywU!n3r71L^IVKB
z2Aw@=H!}Iy^oO{{P-&~R*gXM|<Sol-wOuW!=<JVLnZM}-?A}mLYZ}Vn25Y%5)}RRo
z8@^&kkf^vgQ7|qC(SbrxJdxp2i49Ad9pWh%&auLWY<-`d<>5hf?v53uXls=c!#bGD
zdN=eH?#wgkA^K5@E=Glns)F?_Obm@{geZFVi`Rh(lhU4JYHsB@r;OI~0FSV^cH_37
z^W}3+fFtzvdpG{wvrS_D`1#-$<6rb8qsa{E5!K<}^mQ9HEApu*QjFS0S))2fQ-anr
z%4zH<5biM7<-o*1rg^#j58TB{E0ia$Ec<cKI)#Z)2rKL_XM#g&9_}^!#NyKl)XDtO
zQb2Um2o|{yugYzA)<n3nEifJ0oNAeuv`ojkwrmw>-k>e_X&OPK#Uw-tODeo@dq<N&
z_uX;n{d86pWh|W<=@Z4Ci>Y8guB<{sk(U6s@`TUr|90(sJ7Wz%9j>`kQtTMnKeJgC
z*gVmi_Gj>jvJSt0hhQ1a*;PJhe3VEl@w$A`Jl<|bP;qS;=5~OoUaXg#&W{j3LcvDR
zz$RPob5BpXc~qsZj>;1rh>FfA<b`0{;@AliCXUcLc#O#~>dI4)5cCNY^uyoEfQC``
z7=jPPRtK{ok>Mb1QMVZ!QDLZM672^W8ylX1WqhzYQh84f6z84B&{?CeSk-FBR%Euj
zuwCcIR5f&K^(}@0lG(rA!b=4wBujhL{N1ixf8s~Lf=j>n_CCRI@thl@rn|$X3MoE3
zQl@WUvqnwLKn+IE6eMT3PEJJR8BWfs!14m(w8B7gh$_FcMl5OJ_pk^-+&6&*?X_y!
z*;^eYoM~PiXi=}y^3=-OaM*_Kz@0<^M~M(@sD-V9z}?}a;nVxyqvRfan!^8UXEA9t
z9fjG859iT*S8w?)gc8Q`Kv!wqVvbEBE95?UyRYUreKN~wVt~<e4*iezDCJv51Q4?Q
zU<jK^DE`+be*Hh|-w?b{8n6l<Gc)y_WZJT#vhNJXrT9E98u)E9+P!^Vj+KXjnqIAC
zEvz)1AvaO8DM@e}Zd;Ala3x`*vM$$(j6L3>`KT1+ua($l9y^T+V=BhLm3aZGuI45P
zD;}Tsm#Vr$p0~0_HYv9--Q88Xn!HvkbZ?^LQQYayb1!#`7g%2*SO+#kVrlCHpaO6s
zYZest)hIezW>2|y2gsI2dW_uD7gk*;0-Yy#6>DPX!zS_k{yzwBS^A<3!ac5|ML*fo
z3|*)Rx)eRPh3C&xiMnMF<|Ca<62AI|+oYp#CY@2G`1RV`^PT)o?wFj+=HhcqQGT`p
z^3W3XO?{_2-08!7H`ydJFl_9xDg1ag8EFeJUM=DF5lefSRCVKbW+%A>T_-1^A&_A~
zA4qnRH?ImuG4~VtBy%<3pHs_6JK6oX&nR^~=`Ipf_^1;D!c^!h5`OJcb~o3$FWqv8
zQ+6~W2wR7^<j}!`0&btV2`?XjZR$xXhV=Uu3^PsJkv95rJFMy0EauO4Ptr7~TC(k{
z&|;MuEN>j*VW2l?$&G=qJ(pXu4nOR(#Gui_d1lFuM##lXjfIpb2}Wy_ti?rHFbZ33
zJ2eHw&~nw`=`ca__#i7tp8JVl8kTy!zNH+zHsOqskx;=<hCw;K!>uo(3!hfacNtxa
z_6T2xtSg`X0HeaA8^rN5qx9@J5aJe^y})6znd)TkYx88JW(#F%hE!Q(FI~3wB>&3L
ztR`Tow6~E;h~7@8o2X%SWWsTX=-E#8dc^8P73-dC7%S<VG+xL}`;~(=F~ASodjiTf
zK^>#-1pc;7Wqu`6ZS%~a%j@sy-ClBO-sQd4dkp?qN%%TzI!GptpdME&5KiEfF=@*W
z%jLG3P8%OQSRbcl`tj8wL=ygYVBxk&)(nV20{hO~+#K@P<Oy1mUh<pj>L5sel!4S1
zy!P%Io_lcMkRI}BwJq2}*sB&dfYgs<Y{A4C%BQDEhf*K`x+$HFCahIKB@jXGdUjjL
zN6>j%+hkqcDOwxC5rPU@-kfe%Ud&=vx-LLg8ZbdXT~#NFDsm$)qZVZ6ELc1GLb7vP
zZQs&kpFbBN4nQguG$Sv6ff-8^gBw3^b!F9SCuUkz1Af7HnqA;kPo-DNv~Iq|CS{9*
zEX5liKF)CM4xn{^yuqDRI}PU4SbsD(l|m-DVL2pCkD2Uvct_k&fl844Hfa>!x7RMI
z1ALL?)R{jSvXO#V)C!(y4Pk2h`&gZmYf908GTliRt8n#1d*1{-*G`G?{>0e$I|(&}
z*G=vtw4RPfhYd&e!!0H`wm&JKWzI|6v}^`kE`p7fk(ntrFKykt+quInzBGMy;)7JW
zj<d6K`Q&3DGAH6w>jNc3-wJfF=*GrE=%XWJ_K>N`bf;_|`;TShHBj-dCRQgcWb!Qk
zRGY)8p+bhXZ>Me)Sw$8j@0e$UK4h8)l{!gz&3WiCp^dCvn2XJpl1Xx_i+O92jfZMU
zrdp@qcei00xB+MP$rbFshZQom_iuR5CX<YIBAAHaE|~CG$}`N6$s5QYOxn1<l{nr0
zHt2;_N0&%&df8fohUs(g3AM>I@v-S{a+=d2!|w8%V{?qx(FvE6`2@*de&<9-OVp`E
zXSCF95o$%BW3v@SMK3THq?n7#i}Im4AVwO2ti;^>s6@FWbuK}Fkq+=4e`vZtYq6Ti
z5uW?V8hd9P+1GB&4Yix+XEHDO+L)FX^1wS7McZ?77mFagSlwF8h!|~nn>~dH01e3r
zXhk1wOfp6r8QRin&?)ePo?F{BP9e~dWcE0>+21}J(3zz7?j=1<@i|fmt40bML(p*X
zFdbLa&_4|Yb}{t;K8)|1NN99x$+6*w84yf8n;N#VIlsBJ*oHK^UwW)oqh2a4Y_s0Y
zXH4)y(u;8_wswq``mV0GBo5NOO~$?p^Fe8iB!m}K%(yZNck5kGcPwfG(eg`y|He?5
z$$;p<!6<ujVg)zZ^`Hr<)Q1O;@0Z8&Ai(?h^mh~)%#FCv%0Lwtwkww3iY5}tu{zCa
zLMeftD#Qww{yCjA*{JI~867x#p=jC`SA6o1$Rg*B-k2YNK&3fE{%`ieI)-p-O%+C3
zgFVgs6=D>BACO^7b2^G#G%?zmb-PqFKKxwr`9!-xxDVIQ_ikG@VxGmdT4?Q_om?;X
z<uQx`dzSHB%?~7?Grm-P-o=yP)NfB;_+TDYMkKk7P*1panU>bhSE+^276vfNa!nnx
zK1zsQW~{?(m2lYJi(wR*<=tx$TRspK-kJktQQK5XfnM?>qTfL6^(`)%t3R5W^aMP=
z?Dw@HqE@J?<O5_h%oL7HJPFpiP4>@=-lIA3HMeStIyDE*);52j+<#+aBeWoW%%cR?
zf|W>NNbB)>wC1LcDkp43xDkB1`j_5Zcsery3@}VxP3IJNK_-^{o&|jvUHwMM$EYW?
z<@5A6dS{=ZWZRdmL1*q1?zP(oVi72*N%JYzv!-)Piq4sp99`s%ICc#EYg9BmuO*Ub
zB;^~4eTx1!h~%#<7#eSX`SH5(SA&PR;8?Pipvqic>1_Uwndf-%eB{)FymqA)$9;WX
z#Q#fL|F?$r?a4LET?||Nv^cbO7daxZs68{RBYX{tPB8Cvg9bKw5A-!-kE0FFY(13^
z5dd_ceg)nuf>FI|i#$e!K71H37E>Jh5`kvK6J5;K(S%xQ%(qIf>%+~Q&UdsR!Y%tb
zAD^M2p>+sjUVgsMHXKFzZyj!5Zec-XB29SM*XdBLyoz3}Vj%C>KiwVlZrzS-gq72M
zs_ZqwUUJezTn6u``O6xchjLUR6d%gB8pYFZ-0#08tjr?{EMbIZebR%isjbe^D#SSW
z^{uGizI0~2^Iz{vJI?#e0TVm8?j13!axu!b)O#PLs)|OdXg9{C^+Bvj3MaZH=69uf
zA=){ax8hXVx%EiZ?;VNVb8BVX@x<x+sD*U}!}^Smc}XLQ&%4N0Y$A>APM0#T^2eT5
zMK|M6KZL|5Mv6T4THF_6o&}PDoFIPP-UQnvvUE#31DZz-5=q^G#|VlxM|QVTQ_tn?
z5fQn?O;$l7U~WORL&{ldkEeR9ht+}QeXQs*lFJ<Xy!&@_rD8pe=LhGI)V-1Of(kPD
ztm-h0U1z63Uk(>|eOr~6$TuU>XrY+f>(JF79dyJRv|2X-`%-Sx4;ejHg)+g+NFx3J
zzu0@ruqxNJU3i!nC?=pFC@3l_DIhIU1}LJ0C?QBFAR^MK7&Iy(AQFOzlF}V2B`7Ja
z3}jH!-LcOH*W7Ep`tI-FckK7a=9p{gWRCHSdpys5UvXaNbzX40QGNBP#<xkWFo@|g
zA3h*Pfj(S*H%vS=J=a^A`b@14_f&Ii%+=OhFMA#vmOI7nKiK@iUeiAA`mK<^pzF7J
z#EGw0wjMX@+h8#8-P(1T(*}k&j}9*MsC1##*5+3ANJkl^OI)0<$lEbqG3Qd!8`BC=
zOCnzktm{IfTHa17l7sHA>IhS!*&EIFd2vDJbpgYpAtBGK=8)xT{2IkEWQ3mm4Yf7r
zfxm>QXQd7|>YG&;p`36k*(iYNEe4-$rV*Q}tPg=K51|}$GTZCwr(n+y&hakj=RZBp
z>UB&6ZP{+gT5sX5j!m^XZ~0UgrHHrj>e=l~();QL>rW8$6E0;>ptOPjEVsPECwU`F
zF12Vh$F^u8gf#9hE4H+JdT7XZlbky%1>A-$6{n>*|8BAJI<8)9RKgmCNj{pmUQ9<z
zTL2`C-tvceMSY4hjo5+AJHK8YTX?$fOdA{s*x8Ye>O{KEWZnMC0Jg3Tg7LTH&?(|w
zJ0o@mF(<`a-0Pfp&<?ZCFRoO~c2H!?o&6D{<ENe*Xkmw^hDPN20+@z?)aOv%sqRMX
zn=FQaMG`n+jMCet%%<kLaVEqvzLJV$+rc0A2cKpDO`&27cI^4~j_6iKfO(x5`>gvV
zP++lFE%Iy-&qHR1j!@@~E{~XOUXQ4ZDPLxb8wTGXUL5m=L?GPscvv*IJM0X5e->6i
zK#lr#kMQYF0dZaEG0Lg?ws!yAVQvNPwzA4X+;S+zsbwo0@^Er;4rk>G0p2?sQ@?j^
zFwmmmr|?qHlz&(JUDYtkPp8+DjK00S`fa}<!}0@jzcr=*?Ol4(o*g9h#In7c5u8|!
zdG{U#HVzIQq<r*;7qnv1xEsR$t<?nJ1{J3*D^}0#RgSw7P*(>(Oe88hHM>4OSRZbJ
zj=@#eq@@7KF10wz_thj{_c<NncjPh?p2th8J{*c;2@YdbvU)GmOje(P2t&m6pOTw5
z59SJU5TT;lkaB_Ft1FmxsoypQF$wM1U<!OP1^3LA0Cx$|t8@&AgmT`&iTgsyh-3EF
z`EjUc*6BFfsypt(U}uapfpglp<F>B0{leU|Y5p=Qm352mQ#@~>9_~oLo{mGV&oY0R
zujD#(B~=$tI?K@-KC?^VAV9^*&YA|3ycGoe=Q@wxy>Dt{%FxdW>A@D;qVuxznrKSN
zF#XCWnYZ!UT)&B<Pea!^$4tQ^bDV8uTKR|K8Mka@%MO`3d{%7wwUDNYc|w{owXK4A
zZVqkkZG=-wGj^?aXH|sjG;I5oewh_}?W*~>ij}3s(NR01Lh_M@53L3Lu<jHYVfPc-
zOf^NtEzYZVF~9_txz;BjK9L^n{Mw66fbl!B#Y9x!kcxC28&j4Wy^tvm8mIPnkmt(F
zUL&bDPt_wrr2?+<y{A6BJY}e@1JSLw^rAB<$u=Qkvr-{q_Pi5Y7ybmy#zWBl`}O3T
z(0G$ai+#x#D)98rhijD4YtRns?ydri8Qfse8KD1dN{BO~J&~|u+RYmTzSBd_{Q5X{
zOL7y00ep`YIn0iqi9vR{$8|h1B#!Y*N*M=PUKr{TEak^2G3<lAXu<RDD64UHPyJyL
zNZ1+APCXn`bokMDREP!YNW@DbmXwRxFPhi%Le$oxC>83(F;)JccX;c4eX%cf1CyOJ
z;Vdb_ws<02n}sX~F8-P?O_p(-?>)qm8xPesuQCpXmko75xrt!Rb8t97e?hIIr7}*v
zIl1ZHs`YKiy<=~GPpUY(QB`=PgtgaBy|%U`b<bqz3wqwpuLZbM_U!gR-z-yfa8LW8
zQuo2N*pr?+vARpnuosWO8zgAuX%FNH)je<-DeF$h+{{t#LgM1~!I|@n5%!}y(4{Rf
zf|+#{>=#@x<IFv(Kk(pz@k2!T(H-vSg;|d5FvE8X-hVX_qIlHYxbqeL=BE~AjoE$a
z-7*rQjn{<!<rf-`qD<2h-!?)V*k=c?#3UytS9b-A+U{kV{J5S|+13mFhaCkrejGuD
zcRaD_J-BsRN*Zzvs=`#04+#3dMXK#9CO%x?b6z8O;jp`#TlEPV)?DfjGpPjRFjgh5
z5`}qqEdA-oM5I9XNtv8P$Xs&+-;!_R31Qfy?Aczzdj_k<yFX6G&d4ks&tcmrKKH(0
zhPb!L=~Wshp}Iv&g#3fqqc<b+P(N|B|8iD%T&@oeIGaEyeJP8*nmQDWmpWtATNN(r
zIbhOJ>WkP-Mb`+EIn1>Uet}GWHbti*P(U1Q3ckuFfCPf#-erDo=5J@ZxV1t|SR|nZ
zp^4H!1`f!%^%6#PG1nvJZIHH{WSm7){@V%l*tc(84C8mHb)@(`dsaY%BMHWV#+h}W
zZDPwOnk~IwNyfXz#Ka`0!kH1KP8;^cd?d!rEwwaVBRZ*&_A75Hvg1)A#V7{8?+I95
z2<ku#+WAfr5ah`_Nv-PPVgPWZsOz$iVe^gXBfTAy^74|T2a5!|=s$k)->^1sBaPQZ
z?%OQS5SNu8AaVI-0HfDv|4?*)8d+>Oomh)u{JgQ0ls4CSrE$2^o$8b?0ld+odhp^z
z>h`)8X);4i<Ra(y8_<+SH{a{z+0O{4B{vElL(ntOs}>?=D}!9Sx(Ge`HzKA_MJQIi
zzdDm?h!tkf4&+4#1<Dx{A@)Qr;;~EN)9+k~gc@fznEr(_dH{Zzm{v*qeQUJB!R7`K
zgy;{kO+jn%UThps7w768FrN(VX~-KTX5S#TiLdexxc8Y&&MHr49?HmL?9IHZNM{3h
zGGr*oBwr(;Q1^@%o)@{W<&#KWHIh!(@f8~z96iZpnGOOyH%yuz+bYOIDUT0u5G&e$
z`WYJ=8wu7Mf${9IhmNG%#VFedr%!lF#Dp;I_7WA|xBvp61NM-+@EwR`LDyu5X<2m6
zLcJ#Qt|hF^2IDz<uHitYQyg9-7{eX-eiW=%Mw98*UcR-g@R!%M=MnsPpsI8<p}$r|
z7HT*ebbjj3=W;4h#!_0XD<cKq?^r?$umpep{&1V=*}iB}o(a{Q{b<tPr}7SQDr3V=
zMQayr+)&@x5Ew>#B=uwrr)F+gb=TP-p?yqg{C8FHo%n<X!oA<9*nYuL2}iFO-_F4*
z*+oVbP0_uv4h5SZsjMUQA>t@l@D^XV7Eu8cRAv?Tn)Km?cpz;p6R%-ijL_xvK#1kn
zcd606;5Sx`q!94-Mv<Y%d_A-6KHe%jawp}P?YIt7gcVd(RSz1)j5O_&{)Y>Y3TydN
zH6Et|S<!lC`E{P|E>rD3JIr|o15QX73N85kG@pG_i;`LI&T(defgJW`+pz}Iplm<%
ztY2UD&M+!&B6ULsRc#Rpi8{^3X|Wf}u>W!<dbY;r3b9Z8NHb9jK_jyMQG>_3$g>(9
zhQI1f$fz~eBFdJd{%N;3@9HZym{?}HHU9d~kJ5aZ6Q6zd*Y}7<_uHs50EO|=@!qu!
znEc5gk2K)Z1va2-M)%u75#;rQV=@<+uVMb$xq|DFK~K{=ZzS%&woY3;{npi-1y5z4
zP5Gt8>;J?@oMzZ{*E!8Z{cJ8AzumXt;Dyi%9H~S0<=eKU^8<4>yz@Ousg^1fqi^b_
zvJvt#gBE;!90v8`Om=TvPPNxTPEK#MOaD5ZGHBN&+}qyxZSMh-U)8!AbK~tflWf<F
zW+$57#ey|TZRn^Jl-CS|UU~m$Rh)WOfsMT6LH%+$u{fy0^7Z5)0l@Ki@H{Ryle#cE
zI>%UYKq3W0O#@xW9p-bX?|s(~$*E~V0hF)BjyH#lIAq)A%>*dj<_}%Zm@#WuE;c3s
z#|0P$0F2E07x@hu-k+`OZ4w&HHVa1vV9ulbW>W>MrE)VOgADYoeM`<m8T(?h<w*NM
z*KurS<z|5kn<xnS)duryA?dOmfU2@H<^G@M>bN}^5^wYL{G=!Xe)ZGuJ;_&?xU;VL
z1jZrN7F2xKZoJ66Xq7{xq_wWaz=Y$6$;ibLBnGlDJFdmv@`{=$%Ga6Z%^WN&M6N0S
z;`Jj<dH*2?HLF(S=20T`FBUr5+pQu6SdbRG!2lPeLRiY&v)CAAfja{)8I=WeOP}#E
zSq`_gn>R)&^$G=eqYFB|b}IJreyaJ}qmN^S&L9TdKd1`?i=m?_hQ_uMId6z6*}9AK
z)0{=atJ{yS!f$=S&{+)!Ybmu5i~d~d2hG5l_IXVc-f~6+x2b?~W9JLMgF}gId%Suj
z0q=dkT_$fndf~=IUx5ugOZ_iVxgen<2`#TrQEtrg8^2g!1pQwd`Cr1pw;U@K{^GiP
zb3|eEZABAJAhVAxoz%73e*eJldLco(P@Vg{qd9L^@KIRSg8VpVngs{DiN=>UmWxQT
z6o~4c+PuGx10$hSG&V>UPavaMrK)E9@%~!ZVlU=J4QinKez&(KS`D`~XuAVU0NCY%
zs-=bJ^4YlDnW&P|(=G3FcNJWMmvG#Y1?6ou``%dLy3bco<?-nLku|x~n+zelf|;iK
zOb#{BXle^}uI`2K!sYJ{v%3PnWyWyYRssnQLxb26)%W(Z6PuqfB?=hU`AOVCVlLO~
zhq@gch&!UA$RPdCPxlekq0=d@Tg6XizX7mZ*WHvx&b8H^AFUAAj5kw-DTiPU<S8Gg
z)9eB+1SHJya<rM<cG7geQ|oJm?<PI9hJM{O`W5$c3~bO!ncXyssilV#asmF|m}OgK
z1`Vv6ii6WC%N&8IkH%*HZGE>9);FzjUsXr0H8(1b<~&#YY`dhta5T2R`PJsmNfb{D
zQm03|im~z7YsKcrYPzd*ij#G0C;BdNt{`dJn_rC4$PqH$h>2|Rfbi<$VaCAtPu41M
zaY0nNl?Ze9+(Zl-tztGZkVVnPBv$pVu1guWb#v@Z26AUx2*ijjRo#AEX*isD*M;a|
zA@iPXSp!Xn5?~uxFu7g7Zc0sjZs=3HXzUrko#Tr?2IJh(C#e$k72A^|cdFXO#b3mF
zM9njg0LANyJsC9jSKL5=>^hDItmo5Q(ObhbHeAdcDLM=OI%*aDtel+jiu0(6zDp!S
zRAD<Rbn?Q*_ty^Yk9pKS4kuRwh6m=jC$h&2ALQa^(Z;WOjR$h4+T00Ty71|~LT<Y$
z&8^OokEk<v(1CyP*|V4*gU^97!LVG7Py<<yeRixr>l~xy_j5Hp7*W9o|Af=5ZU6ac
z8xF&bZw5Xyai80xL-SCd%3BbDeuu;C9~gB$8#qJ?ivo$~-NW9VviQ<Xwu>z~XmjH{
zQBeK-wE}1}!{VglJZ~x>EBosyG~zE`SoOVnw6L3qN0fp&VMqQ|*Y)j*&*ov#IZ!jh
z1wgF3Ch}Z_8oYWKbXKb%;hs#v(f@G(BN-SCQ98PQ^%PO~fITb%#2KCKMQ{d)!bU_B
zffpd(x)eWpUPB|8cJ8DuoX#y^y}w+qUVztiM<@SoG<|38^i1h^ez^#W4SossprRze
ziu2{xq3q0Qt$C=405oU`cdJ7t0x1cqUH-~sl#w*4NM}*$EE>)m4eF=NPwv-a%tKFT
zRfbt)K`OyWIU8JSJ1BoLW)kIOnRzM{c+`>`!W4~x{12BNV&yMQxuiJ}is1buwWG*j
zw&v?v84vnt&-t0yWC!>JEl>qtkDsxTAr2SLSYxB_;=3AP^~YxWlG<n-)AvyLB2k^}
zdCR)BnJ0(JydR8^VM?A|JhS~+1%XTz3^w=1Gw;+7nRibSB3DP0Ro7jRkO)Wdd`BLY
zEVRDpN&aXfx9uCwK~YA4H#i>QN)_U5SL1+>B6-#oL_{$DVkK3btmXsKpG1H_TCfz^
zUj0lO4MXKzZuU~NOH9+`;O)U|d5*bw08P-foRoUBaTgC$5)L|%ctqBQ*bYn|>w1~Q
zawvM_+Ca{vMituD5uTjm@v<)7l~!n(mu04A9~op*bZUQ4;)hO3T-Jd6di2r~BnW~t
zpf>-3in;Vy9e7eG5w!RcSqmshDFg(j+gG1sn?|6H{`~Qp<<skzPxGIEs>5*tGj%ma
z(CpEYV@n9n*lnZJ-xwm)=JJVBddM*-y*zgW5&;&maih*OY-m|BJ&I!d)xJGotStH^
z4D!{_u_cII{Wz<+xCqQbXL_WAFn3%FwZos7nUs2mfjZT*j|~N)IQrOXkuaV*-t(tK
z#wtJUm<_)5v7!wkQm3LhF+D1L1L=FEtpZ{m#3cYAigDcil*z_v>WA#(5VV0BWH&zz
zvE9?_vzrNcw*uyrb6*{?>l@7L$4Di2S9rUk(0qs}@ih!WbwiHY-`$0HfOTb~yM)GO
zpy)MM9}<t9J+&~I$BfmS5w;-P&&tGWWEFruU>jRkvy7@QBsF-V#WtRvuP3EI45S8M
z(`@mDVVbJ6K?k(2yNx;8>FF0E`FokZnw2FOn&s^A;{a<;#$W<n^B<WHNkQ|q+_LxY
zN|;g(q-IU|7|eB!?3}!g|8E!wJJ+K=MGlo%QM2GBI<cQ9=L{EY^)B@1UUY%_Vj=q{
zU{6qHZX*tLH0Tpu!_d{+9~+FKCXM*qaUj})rr8J@pV32_6<Q&dCY6G-kn8lJm-&WB
z{(1@oG4!cL-CQut0icAsW&d`9do(ihrQ8etk(YbSpvdFggGJ-lP(+FY+2V5pW{h`P
zjn}HQAv<?LNWur%a_$!bCbUFukv`KC-G-uxYjk{WROwJ2!MXvsT0f%(m#|PU!{2PQ
z6?Lbr4<7h_nnhIs`YbmIXSsjE7BzKWF){`L?dWRF=z19OV324X0&`3%?Pl}7iLBl@
z+n%XQ`v$p@UEj1rRcCLiIV2DrhTW64HZM%1<(VY+-j*DcAZl%&HVP*<Q6Lq%1xDGG
zypIgxLKxbYW@kpR`D=0mpSHY$wq$Xl?q~9JzzIG=RlU8$PY1QrlZLbXCh=Z?IQJv~
zz?65P5%W*h2p)t<tiI9pa@5_Uco79=my0*PE?xreU9rCo(MhO>J&JZZs6+0k2P1*C
z&4qR2B3WGM!aJfm2<3rzY4A;4=K-s!9Gv3%4EN-x%FN$)NmKPdl3?Pm$8(+-uXB<w
z?R#qA*c{_>)jA<j#mB$uh`4riwhP<hhN6QU-c!kY-PmH?9-7d}e&KlMmu6ihO&2px
zPhet@e~8}E9G?l@ory;M>K?dHcgSv@fi#bJTYuW(E&@=FO>JWL5*cyvkkCem=$W8H
zZfYH!nCT5C5XG2@bl4T;MloblI1X1pz2J?7*8Z}D#f8~IqPPapHUSnEoAIW71g=5&
z!Zs`HHWy1vRwa-M2%DJ>QGectQy|zEVVf`!p%%o6-ld4iBKIUlIS}dwV7j}aM$=tC
z=mehHrP!j3!Q9y;Rs{ZIaw>Z9vC-p;UkZj4BP+qAx96~U=ZkFFj~tO-zlzupZ9w=1
zP3H*CU~jy)8$vf37@%#m{9cIVuTk&2oNQqF-J-eQe1@3c`T=upYN}h3P!1`md{tj?
z&VlDZixuT7y|{zjQ6S9|&GDLju&b_jtu}9l7iyNt;;8Rpf?@?6$gjm~Q^dyDBN<1C
z9?D7;K%<M6Mr25<$rNKtO^uSi@+-Ae6u2_Kb_}Wr-gWtAhOX~CQh#wB%$Z>>#P}3#
zaLwcm4ROCjX1YHmfMcPG?CiDT2JNyV!h7TT<0tOIYB@TKjS_bl4sFM5e?4bx?Dd*A
zrqdmMMZPK<FNG(_dfFTT6|uVIfx5-?O};#74o_$#98HJ?9TU?iR0<#OQIR=y>J*q&
zx_0#}ECg*4w<)5@upd!f0pARC7%1!i<ZZtdKt(0+4Wh)MM(czhNpDy_gII%7_hMA3
z&YN=~gjm&S##{Ld*Nx#dVCck%|M3ZtaU+elP1?h>)E^)X0XmGH@P{M-OR&St=K`%5
z#BiuotkA~(sr5pL{1V)&{fA3E8&D44ff)-|M27P1A;@x}ivpK)B=)(_h1n1TRKlP_
z>_?Dj0_l@|K_{@EwW!Lq&tflr2SX3N&G}xfG!rk!S|!Q0o@gJ*A~dBWV~QZ^+L!xN
zH11Rt_O@R_L3Vt&SCi(fQL}0BE^Qp{w^heL&s9X_!7*IJuh)=94f~EL7be7_TCVwM
z9Z_=~_D5XtmY+0)3{Et50tPj*iIk7gBN3$&sEB<e#>?=oo;3#MM8HlLg=HP5%W8%Z
zr<n}tJA7D0SJ+(@zi+i5^it15CCa-1k3Y7m1qHj9<msC=on@OUh;+_@VC@0K3#r0H
zEDs%hP-a1aPN^RP`$*ZA(2{iRHG)COefx)naI)E_yN<-qjHsL7wG~0d^+GtMLU_;*
z>UW%RwSt8EqUSf7k}+Mp@J7xRXwXILFQvYRC^-M>{i+BHy%%Tmbiy!j$}?X7!@X6Y
zxr%?Gk1HsmAZ0HA;&K2%Vaj>UE&>vSmPR6mWvWuRA&beN-Pe$|r5QaQOn&P8R-VNK
zSOSkKOq?V0+lv6X?ocz?6{`JML=HiSN;Y-Zx6d>=Ygp?RsHt~>Hl`46K5I;vD#LGs
z&1Pdr2YhJtE-}E1ZdcKqZ}w~ph)1%)k#$(Gl?OmEs36bzn1p`?5ry#;G$Ns;4g^h%
zAY&SuYa$kKhfv(Z8{WcmLy}v2<8x<Ta31{QhJ|XN6XksXJ;5exe=JEs789+M2QB|&
zctjN`8^5Umu!p{+y~s#OI76)n1Y{FSCjghJQxYJ8wUbcJOnG(h6x+GrEhteH$S@x$
zUX%+F6LlDJ{-pEmZGBiwj8S+_IZ#kB;%;G_j&AJC5zSl?%#VqJoEKHJ$jyfL`V>SX
z@#aI{0d9pkE;19`uI#gei-6yEb_GqAA@AV4Q5%nZNW*S80{V!&u-;dgZ7Uz|$#X?H
zj4!tcfxIkAu|*TUhg6D?tyT9xY3kjGt^ROZArW}os1P@9lEqA9Z)oFBr(_O*2LUax
zGZd8UTHc;eTU?m*)A^om>S~N+%^k-`*Ru%3klC%hkV3hgV(&OpL!lsmiW(ohPkh7!
zIt@l>Vwv&@E#L|#?M#>*rZ#IT{BeJe=dh4AX|awM(it*wfgM2$cBD5P0@uyl>F0nY
z?a^7PL(nA+kG2pfvHe7&0F!N>D^aWWEk>E@=+X<#>syo_j$B)}A6EOPP*6R#RaWT)
zTt}ob<!i90FhTSw7n`Mnh|#Rl>fHp<4liMVLYDZ<<l=eA_8cBgm%DqV_Urtc*Qr0v
zd&|COm{Cxbbyc@$Jo1owTHbEt^L~a7b1?$420zZdH!e#ImAfk)2}CCrYDuCtlP$cM
z?D1=-r?}me+2XE6%LIe-wG__FsUk!eN4P3~9^KNNqLZ(k(xb9Lne47LoSgbGxUdPc
z=#@JX5N`}4C@5~Rog{`v7zD-sFi%N~br<b!#@CM21j9;G2e`lv=k3v%d4MsGEx89>
zk-@p?^*j>{*rPiustEWH8Gtv$kXglM3~W+*uj1T=Y39vSP+rmG>>Y1LxU8T%3(|TJ
z_x&+QpQ?tNl_OO)J&VciI|=8LGS8Xb8rFb-iUI^zX~#x2_-0^9UOzvDxQk9S90Fy#
zaHqQFo8GDVyoHpy(LZVQ?{jrij2fdp9?kE3C+)7xc9$=)Kef3Cgmebt`oJ*V1kE}N
zz*_de3@#~a>uEhv0knw>{}^--K)D3WrZ+^vm&pHGY)$Sx4wIh<pp!xEMF*gZ46+*{
zF$HOIGm)h!CJLbu1ajN83CMUB>rO-6PKi8qh?p6LP+YT4IbK7(t2Yr%Ayvp!z<|62
zqO1S`r2&6RIor|*0e6C;nDE1*Sq7!`@YmOr2(=^P6<>f@I*W(@ixUiYo8|$zJxrl9
zMRx|(5{p;6aGh<X9vgUVsf}+8@4y$Sq5T9kdA*8-!#MejgL&enNkM)HRtpgvK38T&
z@PDi~#_R^4GEgz%4K@>fJBWA-tqMn>;KdMP&#&(p*B_U4(;K-{WG#(gdnG8vZ>0aY
z)8Edlr~Sga_I&_4u>-k@{v$hGn2Rv8uCu;3G{G?M%bjI9uc(+P5%=zVxXf^8U^uJq
zX{D%hfD6H%D3SaFQRq2>MzZPC0Yugrm(kgjtVZw)LF@gYMKmqYMLbxPmbzj;ZX&|<
z&q<zgoEQ)l8pteXnA-0neEo%?$(YO;*Jr8U1#hl;=FW0E)H^P#w6Lp0cNMJy^Kt1b
z66?f9S~;TQ(lu0naO}3)Xr-W>zg=NK{o3}G5r^;WQBXTA*_e8r?W-J*^};PrPhMjm
z{s6fV+nn;BkL`GUroZZQ1Z8&#4F1yxM|ryZIF{0eDFv=m<MAP-m&M1w(G=&-mUGTb
zFj}=fRZZ=CmOTy;!lM{b)Ad~oFaFP;{Pc@;O+pc5`rQF)YH#TA#aBc{MYSQ_b(xu&
zk?6(fEj>otzAX1t;)z1Wny#v{lFPsz?!)xE>7eTsj;^9Va`d7UPX=M?Wn0*FiRKt7
zscSp|gjD0mx(PzL5rZ={llvk0Za7-Hh>vJvWuAUJBL1Ii!r!&7Tp(nY@|_@WwP#_%
zB);PEVm?(1;km;dra`elnqg<sGDDYpO9=tG;mzHDUEq+RaZt4h^<%jsM=nq=BRSn$
zNbckGE0gB%3mo$MV;?C{GYDAFFW-Cd!Dd`%DALB(cB^&cAD1MBA6)uIfBu?lX4_vd
z1zvM}^8wPI-9h-Z6N|#X1f>4!b)-XoOH}>W-;&&pFWddcuZVx$c6a%4;?F;R4lG~g
z^jIt7O8K9>G020s+*v%Hc#w2oDsN3UM*05vbAaWC_+z7Wq&-!f%acieoC|y#?q3Uc
zui>Grt!s{6MgQl!Np7bmY4!##KYnt|-6`hp_UGf9|M%PL>ka>Giy)B{q%s|MH*O=H
zxYu!8P(J^!%PZ{7$!RR<xV?JW+Bc+4TR41vasM}8VR?|a6PA!3%*6R;QxR?e{hb98
zzTeN=882nD{`v%Z-2l0B?Y9M;o$ljXLZ7x7o953SnJ00~yH6~GR86B1n~iPK>c3wS
z9-1b=&}dY&o3zR)e=wrvy5yf1Avv87MK|q=RYYg*wWNTOYc|w>93i|#MuDwnD{&ns
z7i<`#$Y{gpzi(^)n(F=)M(398=Gu*&t>2~R{P%}#u58Q@#CMh;VF>qfXPn0FfwK&M
z-@U%O0|R%i@$7IWtv*j$(|#&4D=bn!P~xu(=HKl8)kyp6j-Ld{8W&szu^MUqXu-d?
z#6#A=uTm<0BjTZ4_^J}~^BE19DHqo6{_Bd==lKI&V=oJb=ZWjnAD381y1T2i<91bJ
z;|@{LX6nDTBFO>^yL`vOLWU!9j;0}D9V^M=O`bU2<+O!`Rno@&8ms@ln~q^w!n>B%
zob`-nxz>T|Uvb@i-~XalLiQ)9y!>nFqSKy#nU8!0bX~rU4%`O)p@)Ax?c>_IJfc;#
zDSWuUS4on}S6AlWYQLR<OGCy`DWP7&7JVBLum1YRkLj_UPe#@}`Km{~f}S5c<>qHS
zUWjh8u^);KgNPk$@P<`?zRhXvA)jBa5TrS{uwuex`Ef08V)y9rg8B%pB_X^gJS?nQ
z>(955=qIsNpL`yZI(LrP;VYI+_~Xq|#6kxKyaomafXxD}-n@OgFJcNN*m=cw<i&qH
z%)c*pTAstt{Yo6??Tjm96BE)VCj2uqHognXSkGbup60y9v-EZT{rZ3Ywjf*j_lbv%
zA3OMe#X$bEtpE5^VdXl~Uk?{1W6l34%l;n={^zg%Qx^Wt+T}Wlw3~EFO5!5c_W$9Y
z{#p5d{P{oSOArf}Km<^zc=<8|l+uVnAW$U3nIL3liBlF6^Ti3TatiAi9Q3}zLDy(x
zGB%;d>hqa6T1L&OM>4arHW+Lxc|^QOaSsE#SR>(y6;8KH7VcltwmSX5Xw89Dy0Nhr
zW;~bCZ-A8`CdT-%)k;GRNkE%;pJ{kro;bvZpgaa6)#qWvuX7+vVo3(cLpJf%lRZn)
zMMa0ED@z_P$x>0C;F`2BA}&y3f*#Prx6#qOgy@>qiSC{rLXWo?Y!+&rHSL5i%9mnc
z*vYiCF0QJQM-OF}t}M4VagSCqA{H4bG{c}YN+=8gY`GVCDzat;r%~!6G1NorF!Z7d
zK{w<Znny9$!m24ZH`faNT+ku+d{WjyZ6Z9fhj^XH(+!@~zdu9c^COvuc7y?-_r4~X
zuc}B|)0a?J_Z(7nN2WUEgo3>A<1+M+STI+vTma9$LHU>B-Mzi;5DN1UAb&Sd*t2x&
z*q9nCD?dNP%bZ+KiXFZ4`;)?+Y*<!^*r~yIe0-dkX93No^4UwWva+vhuA6+pt4Uiw
zVy)|#K3s234esu4*c22L<oeQmX-OxSH!56BB$mAUV7ugl&r1((@8b>2!ljq(et(&O
z?=aiNxo+W>6x+WpR_oRB-kSKz5X^Ob@!<Dmb~aWr|6bbOr!@0V{`uu5u4-72Pl^{V
zY_%N}WyLfhs#wcAccf%xA1x#7jjKZUhCt)yOiT`{*FmrN)|t$*r6s)f+3@>v*L-Mx
zFRK0YZT^)Whw+pj*Vdo&0{a=9^2YoZth~g9PEACbG>lD778}OLdX|?T**Y>)N?eGv
zaFT!T(tdd=FSd8-Ha<Ocy>S!QNa<u#^Z>gK$sz&+L-fiS=T^((o<a1OBe5~&_u`(N
zjbvpBi;Dx%0))h{S66St?4M0%<zHG6Y4v}zMn$Y~Bi6{lCy)jO+Zw7^G)EpvxL(8d
ziCE?q&Y-ihc;e8JyPJaGpLojfKWj~Qbu5KR50<_(32P<dlgC$1l{|E+3dh5J2eB&&
zlgigMzaYXuw<};R{<D^FqY=N5kPxv#sNrG84~p7b+g#+AHilD>&yuRz-oT}Yu{(o}
zxPKg2+eYI4foHkVF63-vcuvj_EnJLbp#^;3xg`eEfW3{IZCHGM?eMGreKxr6EbR~{
zJPYDW?5&q7!?OH%mWMuubfrIE8N*TH3ZH6QT9|&_v1y$p9*(^H*Yqr=-%I)V=Tc7d
zuiW-%`SH-uoXOzLAO<;WXc1T7I@+v%5dVtiW8R`4=D$yO-|w?}Jn{Eke`?5bP4c)Y
zPU;8&q!C*x*RjJ_g_;N#wER;mF5*{2IfbIv{QIWb$}DN%JvREinD(6&jhhri5M@a~
z2t7O_!@6}AClHo`hlt^vu0piT4ZpZM7#J8Bj`Q7~c6sS>yzjcU^pHNYE$yR|al<cg
z^dd-`=&xZ0=n742Y-$^B;tu5x-N7ao3SydanC*+W_<P|p4~+;Tu)A@|3XwkZF(vH@
zO~>(AfwT}Yk4@!z;;E7*zD(>mBQI~BoSOQqFZK5>mU;fidxI1AgihhTd5%0#$%%+a
zX<fe*VpwRZsMLqX5QGB7ch&BCzwZF+xj*gzCr$vr2m@(xbor}&C_ho<PO=dxVSdT4
z?rxVmLc2B-QcqRYiZ-%_PnRCL$HpaV_V1@40$bLA$XrTF%FJvulx|7H*CVE%*RMax
zU-7raq8I(I8%O1x{=eR&qZ7`0l(<zMiE(jpcjL>-%An?$a4q%s&gaVf<5nw{KXgjK
zL2!X}zZ;(;K?KEIHmMaFsTJ3XUM%f!t+782PXr#1j_k7Cd#~u~Dt)W1-ENnFci}sp
zhDFz`udS8V)vfh6@mYFz=&?UP@e4i?4|hu(wm|FprC?M>gSflYdb37)F-ty<<R<xF
z?<{+v(Hi>8M3%)SAH^_sg7}I~RVnl56Vod6irjvGl+~Xfh2!-5qi`=;-Ir1m8S+G<
z+(9Gf|HC_A7na@;15rQNrltHT)CEqH1qMb+3WXL3XnHlK{%e(I{#a!MR%we>e!y8-
zoojKQjaX(vg1rpybH5`?yZgXz&;9S`eK={4Rv*&mmC<o=OILH^uB@%)8yZ*DJNo-z
zwf%9*Pw!(`UKEUc^nFwm`_jpwUqP6M-h?j(zt2G7{w33Vl7E_r5{}>Yg<bFvB~o~V
z;;S^5x_cEwn)Q$BSU3LnpHal~&u0MRzZ(zDLTcjng`P~U&`zx|aQnTT6zu-ohs5SZ
zntRG&`AO>~sUUhood84wcrU5wkHfYv<nDcOD*9!6RW4l$*h9R+BjJC41)V=`?b8YZ
zWcWL~{Qn>KAQtw=&;O*r^6v8Ef2@x9R|2s4Z+`v%7QST7|F|>K{|AUH^y7cN`t&DV
zKXux!mu3^8DPS}doR{5Ye2nWJA;sBIS{(l7jh@yKzp}zdVq-t8(0M{lyq8|ZVd|5x
zHmVEGb*Q@MrVo8|r+#!*u+v|s4I_eZB~YUat7P+dZES3acgUP1Qd%vei%Lq3wEtS>
zfo1R+$fIv=3NOiBD{0pLWY7ik1h*1&dWl6~>og)8weABhDMS%)wP+myjiWKi7M5x!
zasIh(Ua{`*B_ui|1fh+pj`3ImScEM~FX7qQc9rwjQ3yggHjM$k#v>H42iuF()YR-0
z$V3%jqPAu4q<rud=9<WglFOQqF1cfAIXGc)HjtkW448Dl=XzgWW>_A@q^2TIhVYzu
zUn`WxDX4?E@)_1W8;e0TaI$#3eo?(;2E;&GFhsWxc#wpL>K*MJ?0PPQxItYU5L^|a
z9LHfg$AC$bT2STN4rxx$W{+x`eWlYWblWcd1Gj^o6Zyu@4I4Z^iIMSHI!F#yugOmz
z!$i$}&yNW2Gnq%B$CHX_Dg%M$V|oA%sL62kjgC)D6usb!m*H;~?i&>wt8^wRzY>O+
zl2}zY!7ot4bOTAr{*XD{mKoIE80gf;hBs%uWc9X_wHpm2dtgKmIF@kWXE-tn$QM|N
zr%;cv6JVj9X_*0Ulo`{5yX_SOT)mxPF0DZNSuYYVz76v%&z`zDx<mivW);mG5tI4E
zG7d-yOueG2yg7qu3XG`D_G0=fqiP_;j=^W`Hzmqpn@IV`cxh)hdXDKgLdQmf3Bn13
zXV3YRbr7|fPYXXVmkMKb`htSrWM$dPiIJ6+l(t7Ji~6PIqRq-`(DvLNS*jvm?Y??5
zG_Vz;3htLi^t2YCF+ygX9Q(>)byj7ES8|GBy^M;A%0(5G;_n$|vhyP-KRvh`-&G#O
zfNU%)=PPUMt5<tA3bsE!h6*^v*u>Div^0uHbb9M@nDVB-)}SrOyMJsBd&(3=c8K|m
zPOgq+wrIGzq~L<mfr?1_GLqIx1eI(rshH=aThtsK9SOaWRHI*v6N6dZVeW*0Q|V<)
z163Nv;8<JLJj02;MobPO#$#0*7#K8k{Hl-FWJbTQ4(RLxGMbv2pTA<Jc|z;vvzQms
z>9t0u55vYiD(nZ$5<oKs=9F;rM<y|?g0a89{~>RYm-s?D$W-FbU!#lHU)<4QZmx@_
zU>Vinop+j`D1Waa2~~`5F55^O^)KV>WkYg>fim=oh8#OOF*zyA=Hp5nQgqd9g)kMF
z81%YfyVKJ&#M0|JPmYiKY@i}JNudUOFnzF60b5N5i3mDV4nhKCW{>^QO>|kV()3R1
zLOi&>d;%@r^a*A7VlJ1_?5psr203IKhN8JeoFQ*Uu{?@Fo2F6Vsujjf6k9WI`Kp&R
z{F5d`=!Rdww_=G)m!ewDzJLd+me~CL+qa9i0=-2>4y<yrZ3VT>t-@hqBzuK6vrYFN
zf~!$9Uax6#l0>4EsP+jTtq##`Zpob;5PqF)_^aBo0Nq?XF=YF%d@98d9m}n$!Q|CF
z8^xv`b7vf}*W2KKK*lyN7}-(!uQ!gLFKcF57(=RJ<ou$g;oFc83mC`BgoGkos24-q
zPt4Vb&tE__Ct)~e(BAT!N%Q=KA;W<|TXYfXfcnrBOUC96%gPewH|kzesl&v&A2{-#
z7DPw8D!k+E`=d=u_B;YY(DduNt*tEuRc?<%ap^2*-n=w)baBFDkroqv9kaVcoyE^M
z65kC?mW+8bweceP*kCk>47R+Ai8*}35T##vpMKaY@%9>i0fAzSZLTL8ZFeaj=d+&~
z!#+6F200CHbkZIGiMj2E*o$qCO)zrGTiTtru(_p<7N^Yw)k$FptbCZN_KQ0bV0;B-
zNk-h&gbJ}y?Sb!t7-u@xfT^<}P<fHB9YMndo+TeU`@)o>31Leoe~7!{a#=r%8w9(y
ziJh?0(b2&S+YLe^=bok_;ysNAd5Ji8U_28|%5J<BBD@O}@dZ|~ktd70fFn>AW`GcZ
z@O%byX;u&t^w@TEyn0_;IPHHCBeH1HS8!>Kw9gRq37wxG=XF3DL3gDXW|-1P23go3
zQKDCH1#d=%5i+?TikZxYG+)1Igif`{jLmwm^nF)=A<G4e2;!l)rcZYU>VPCLT*$dV
zP6vUQTA!-uQ!bsb8CuJ!*+pla!OAAcTA*qyYF4G{hUxK4$kS(nvcU!2uDtAVJTC2v
zgDWD&jyXNy`F?m1eckT7<;Pezir%@E@Ohu#6=GVVS@v+zYROfklTJ^*TN)e{D@z^C
zJILu$Vb_^>HK^<U*0Z<5C0*y#-2w((w;x&%91La2xWch8!YO|A&Em}sUAzsa{D77r
zFYo*s?cPxq?*`(e2?PgBywBP9)JO^~z7#YghSJ~2p6@qd9?@04c#$~h9?T0vUW8L_
z3um4;_(0u<p>e9vyvXxJWG^x47kG1qE<|Y+$!Rkp0j+1daK}K3{}DhJx}o=TW*AG$
z`~XD<PM$JFA@73gIOy72M-DMt!5cR}*EQX-8oJ{9Qnt=~6(B#eyq~zRun-j71p~r-
zabc1QLmr_hFL3MPj-sOW&l`m28t0}*-7|G;4;q8<^$e=|iO0ZAY;)beAnFC@pql3}
zpPnlQO%f`~Oz&b`Yv%IfsgvHAmWjG(amSK*9R?}*o73q62z1cl`p$J0z6@78iTs#&
zo)|~ntBpp1b?+^-4o~FJf6gmJCTua41a81K^XFUnd=gAPR@%31Wv;kv3&4r6K1{V`
zM<R-s=`3a+JKuNq`K0SPI~GuJo=6ztlw;0VeGw?6I&Vp&wMT;|b_s#<`bdd%3{J?v
z*!alLJTp5z&-QuZxe)+J(Pml3Cus}$E5yAgCM+yHOrsJLdCrQ@k2N?hJ|NmJN;)j&
z2HT*8--c;w99ED0UI`H%2GT}e;a);QgIY%e<k+CM^AHMFAL4ldhP16<o;r?kqCq#g
zNTh}p2U$t<qG-ET{BA#aZsP5ni7n&++`tMtfLP*m+sxXaS4YvDb@P#U8H!*A9-?TP
z#hphh{qqK6)NB>&FrNn_01aBouM$z#-cK0*J`AdC$7=3n^X>aB2Z!_t{^T-G(kvVG
zSF~@@0tK}0B~O=oGEq_AwHK8Ac!o1)8>nmAEi)LitS~gZ7KxU}Bl}0V*BA-kC@D4%
z&#O|+ThTEWw1R6}y}HU&tF-3SM>=Z#<<RkxY=bdw{t0!VGGf4FWB5p(_*-B^pfhnP
zzMGqQ!f<m+=2}u?_ITcOU`56gcqYQk(eEQ9%S`Nh16O_WI`L5LjS9eIu)>p$b%#0^
z%?a7?t~y-<J-)UMzvj`p5QmvxC3?0S3_R?|qcxAHR!_k|bHe$`^`#;)d>0J?c~EZ3
zcM~^ZOAqMR7EUf(xSvuTQ3nBQt~YOCuZewaR2K!OnYVAV7Ww|GjK0K*_E_Dd#;GEK
zT<#vfe$!U#C*qj{nVem*C~2wY&anfMJDEQGey|c6Zd~m(!FQ@pEtD^#?;@TfO!3#t
znz(p!TH5~GY(YVn-E6FLa>5rceSNTg(i@D@?Q@Njd5&j5Au)f{rJi<E9YdaThGR|a
zg~3Vc1o6Ij9qshI1Wc;kOif7n<w0P5wgWi=CiWmSds*i6sxx_@-bTglLDFi+ilD#4
zEGu2;6{45aXf)TSFYaE<thoa;(c{^mMiYS)A&I6#2v4-R4*vLgo(`ZNWtN<`4@4xM
zH}y4v2Ng2C1UuD-8!I%J2sOcLJdK2)7Gh1&)fbi{a@Qu_Jn}iR;E8N5tKz$nba2XH
zFMM5Fh@jQ@kV>2f*w<_(qQ30z_F&wgZQ3>5TZ|p52+5zwrq!ng-HE{w=>NV;lo&mD
z2W>Tf((u*SpK~J`M?ouVLsNkl3UT)$A;hwD9tm=z|JE-!5_AGT#=Ho+E@-iZoM1jq
zeV}pB;$khxU7Ix#JeeKY`sgTbO=MMleU~Xo`VRVy3*b${U%k3oIYT8r^#P}>jM0gX
zq{VpVW3J?&E!mYIw+@cnA$W<Py84dw`<8WlzrM`kXHT@BEPPjs&8roR&+d8K_k9m?
z=oDgU`*uN`v6#_JuEj=QU!Qm`jlZn3va%@H;|x=lkXl=`@oT<QtEA}y!Hcd~a7iu<
zLzqB6vI~-7#$#h+eIq<Xyo8yfR3mlKQBm6PX%wdww1uwwb1fsK9m@PPw?jjtJ~Rb)
z%BoA4d}(M5Fzs2<@#K4gc3^5=fq=W|%&$l~kwN0zy&tohRw|=7Za=`1-T5M#5;S;m
zIWnuPGs|}8A3*QZdW#vE5+pa2XBVCqqCto%HvUo)n{tfm=0nOcF8I<=DVd}A^Xi}d
zK(4~rE^tm~DNre?@>f4+^5*!jQaxMB3&S{Wmo2&WAmW#&L+*z#=-WQy)=~uWrsY3`
zh>m}&SrP9_1{EHy2M*$hPDandfwi@{FP=j*b$bPYe$ne&Jlh~G1p>0p=FJG4{fa>T
z8b8+Y%x8V@fc>Cw)$TLLIRr+ij@UzIkdjc$B=G&bHu-)~7L?D{#c^tCd_UYo(VDx>
z)%7GryD+a{zxcGPgrTpmFUHdA7kUb`7#v3ocyY_bt`}&r{^HNgs^K_49uz!){cHY+
z<WD*)Cb*d6QC?mSeYvbNw`~VOXj2dFgabRIN=morZ^~Yttv;V6{;Wpx_UFP?>q!uq
z`FvHqr5rOp%Y^MVj9_odNEPUd&o+X6mDJ|0nf*rV9fgQ(K%Dh}mY1GZ{}*2I%ui*|
z^s2G6+7xV*Dj+ug?wl;<{k**Oajms@d|aFta!w>5bgN_IHS@$AW}C@HZH4Ysv78Vj
zR#Q_WDnU%oaIhHw&wAWL;Gy*hpIG5Qi!`g8qihrjg5+Fd$PrH%PMf*ukVWecHAsB7
zhbxm*QFo)lH0dvaY3H!lARoVogei8XZy7scH*nO^ZZ%tgKwRhR3l$1Ho#&CuLb7AG
zap1JU+9Xsf3@}9)IS8wU!*qv%i3xMsWD4;<^iORA0fC4uD8A4ft)3=II|wdsef##U
zpw!p9n8C!TfnxkFCdS2jw6hp(U16w;2nq2QAR+BoWzQOsm`G@qFk+ApL@gZ)(Z8Xd
z%&Or%uJgtp26O52LDD8F8ep?>pu;TU{2|hjl;-Uu(#hcc!B#8_J@I0+NV1Qta&*XF
z=Kk=RIbzL1WRrB*1VmO{AvS9Sdd7M30-Uo95sRj!$s+Ts>QX_CkXS5sg(wEbM-mAp
z>xgaFmw>HkBz51xt5<-=oHnR8d!h-&^rY;$U2!;n{?NIA0$ML?rlev*l8>S?e9(H@
z!^9}X0iKE%!j?C&0%<d|3o+_h{K57UX$ko5=gCD?r3VPO<aen09R)Qn<e)`xq}gRb
zgJ&+`6k{U#ULu~vJV*fwsP4RjtpZum0AmTUPIQW$!>GIMi_;;T1w=C2KYi!e<ku(Z
zH@9-1TS;;n=J5GkKo~@KTG1^?EI5Y*6m&5xR#v~OWT1wpYGGm5dO#@z%^ymg52{)g
zPS5qI<gxdd6U7<ljY3?Q7P|wfi5Wo{^)2|I<eoz=Hkdd5fkD3O=?0j=Ve}Fp_qixV
z2Qw$kT~z_Pu!*qc7*bPA@s9UE$!T+*2h^lHW6e>t5av~TuO&gW<%9J@3vDW?xk<;x
zN&l8bnO?!p$C4YDwtRoeVnvJfBWZIx`?)Lz+U3jH?}e&XzD?Njp~cf}!~1$EPf^;7
zefyOAWKQ)p@VTn9(t6}bxwtKtIlr0vfQ<C{P10))59B%yee~`q?`tuB-#RTqQ}HP{
zAVYWHdzLWSw)3T<>0pb!&#{Vobq<#%lOrPb_0+|>uiIYA%F_1ygV%oXqgnTu%Aj+x
zX(a$wv@NY8o!qoiV$;guwOVV)ujXD*A*a4;4@E;fcdw>Y^-QbvMz=E<c>)e=da1Mf
zwxPM;%W$ll=RDPuCzhU_>swJ=KJ9yj_@kg;FR%rw;o;%cKV;8eNm7owcrZOHE8NQT
z^7lOE2blD8essntC<Z}cx_PgO^A}n1aX!PD;Punv-4-|B4AftURpWy!z?!~2dtQ;I
zxBSBe*fXZ9ak4Q%hbnh&<P4@QJ-*a}o-ALI6XpzDt3w0ZR^M*jwt`dXwgOKt)n%F=
z>g46;;!@ZIE*y;hqw(JQ8tJ`j?(HW2*%eB1!q;8>2Awwt@UW5&@7uS^nTn?BhOL+w
zr83jpu%WSWZ7F(Kp<m7LQrz)_Rx$bgRmrK@_!AMQeOCssfcz4tk>kd#Q^dl}eSR<|
z0i$j6-<~J)POiF^<KgD&`T^(Obb3TLXp+}@WbasiGabzBm-%aYdTl>H(W8}D%~*M3
zz!#5$YJ~*_`JcjbnslHAb<kl}erjZ}<jHZl7q4G@u>O&mGBh@}ZOlI9hUW4To8e@u
zVU}dW`m;lcXJ09_;yy!|H*@#fkZ_&rhgDl2LB?U7Myalz9t#i87P5ozaYOx#Wh+)|
zjdh>DWomkLBK`_TF?x)_QulUob5qPZB3oRYe!Ii1bqY4$*JsbyPoGxc6iMPc`cJAJ
zKTevPchtTq&cedD@AR|EThv}Ip7XMW{EiEDeNE%*C!69_hgsQ`ZeI<yy>*Mr&aP<B
z!Gml0`T5iBFZ;*pqUjan-nFDwWIu1OOgnZJZE4%L#kG~baA@q;g=C|~(>ghd5vM<p
z9k;(YdVM(@gI*8-4n`5HHG~Kqy~4+adL?R}fE@!ZIfuH>WnA%MSBm0k_74nX6`EOQ
zc4e}=YU|ajSHD>JacbUkcki)MVE4Uc`tEhA_{|n-$-$PK4I_s`_zc<5!}H<rdKwzp
zir}1)e${_%fiSMy!)?+9MPhp8<1d4PGWr=A8Q(*D09$o^XW!|FEt7+?S5XBP+<0uy
zo;?RHr+S>uDJeN=WovmpVFQy0J&dJN!oIzGL$7|4Atf^EqtDF)r1bVLR}oR%1#;Tj
zkPyzr%S$QeUY6h7%mAsuFX5Z{PMkQgoD_O4qy@bDcdaj>tL4(#x(TNZQoK9G#B^3=
z`YXOG=&g_c*(<!6j#J}XkI=Vh6`J*QGq2DNB1feYq3G)3avADIeC5HS(H56EI5?1$
z$(_}_R+Db3lWjM>4ubLdA0IfpMVM7?{qT`27jJt{*xg^zK}OUKP;VCED#Md{_qE}W
z?`hMH((NBqS2$tnS@MnAorhEwTtL!}s%0gigiZ2&@H(S-59$6xjYrPT&Zh%ct)F`j
zI`lC?!K<I278-zLP(Chq=FBHL&5Ku=Mtf?-34Px8$;sQEi914oKqc-Y#J|($N6C(h
zYZ<?<J01S`bcAYpB@I+v?=5`pMEAoK(%FO?zTzq&HA(`Rw|*`MoE=xo-Q3X7+WD1%
zOF*D&LMdKD6xi)yz18i{o^4|kx<e0>Ts;#E4$aW$W!NsxXB_G;F3EEEvF_cw63tCp
zIx3@k8;;6^FsPmT=e&PBhTLMqBN}Gy=NXxGn^SI`{xTQIRqp8d)Ap6<X<zH-A><R^
z-kw)i=>7DFW(u8ga2O|2F0bF1%ThVtlIKXHQXl^<l|k_KN>Iw(0nx0xvwwG48q2Iu
zqTN&Kh|leXl@81^Jz_IcY#xk)%f-aR-lwI}J%jY_MlkF@e$N;URX9)yk$v<>$SK5|
zkR8@+*idWrb?`?P)wznpqVLsGZs4qNLoJ1+a;&<hW*G4-mv+G#=fipy=H|LRAwPfq
z+}XSotE$9FfiB`t+0V<n6&+^j4x-x-w5#;eu}z2_SmW6bxuQ?Rvw;647GY2e(h(8V
zmM2-)M)`huT?RG6!q5+#8-58yPF~>l<Lqkv;LL3r7T+4I#O{0Y^y!adzj(jhD9s)`
zENN)*kg4q9w-Jq8y9YGPVxh=^*e&YX^nP2>FoUq@K?R4Afgi%#4k^oViI0wrU1T7=
zzxYlO=Ore8q4mRx@WsxQq@+(1{mrcd100o#&ra_P3uDqMefHVKB|Ty?cjr+9C#>|<
z*`TH?dEtP4b^4pk8=whVKFj^>1s@64>D;qJDrXBPhAFZGFX(D}>Gll`mrSfL^<)$0
zTEBih<O&YkA#`}3n7E~{3ylE)z}{$ydS+w@LI~0Y{dnuf4&czhNNA(!PffG=W3ry-
zoXws3H6`(~0=d&~#A}$g-Fcc@vYs1Y8)m1Gd7S4u?P=P&OLD1rd3mM#55cNcRaG6(
z%*_rx%+39zu@kf6;22Z$Ti#vR|BvgG*d)Xf!2$Qebr_NqKc62_&y<Taj<Ox*F|4Cm
zEj)ph{49AwK99bnHwO^5R02(ulDbc5qA0MNn>|cQNs&;fTnpW>msy;<&uofAv^p{H
z!zbySF>JSlLAN=Oo*hUrDFek{zEJbsxF~x(U*`V(`=KZSe6iW$x{a2W_MUi4*pKh3
zmz%ko6QxqoE~u!$IolzN$oJNGkEQ`ea9$|zIUPa#B~CLB26Z9LDigRR8gf@>-Wk@*
zP3Pg|l>}mF+N-=0Vw7xAj>bktx8|lyiFGj)aNB-|&hchCj+e#Yf+@U_+cCiJPRF?n
z#{0vx3R0=#%C`z&cz85lUmH*2gHgN(7aN8haql)bLB9Qo@kvte9fK(|B~Msyp&#+h
z+YtK!O~-k@n?Kx+!=fl4TIf9XKFzYk+#`aIiIvo8adh5wM>KA!gq0P&h=@q~*;bO4
zuI_`uT!#BpG-2<#wZfZ>cg|+INpMu$N9PN|-qH||?69-)jX=a<fWuhdRC0~yPJh#b
z+3!(`5pJOij*Ih=3F0qbGQvkN^XeV7v$ONpA(fPt`)C%QSc-%sHa!UF?xvE<a&{K2
zAtDW!L0KHU05c0$se6E1TED#$=Q6C5BOQlu)yll$OJ_|F$L3dY_gc;di)Q^C%v(nw
z8(+SvtM?M;W@i@+yTa%c0GHdP(HGw>N5oRZee46`Ovqe)pb`I~%~tsM<lbAiZsiaB
z$h)eOFQZ3(4>|g^XsmU^qqv>qj=_C!Pgm>Xf?Qm!T{gZXSzoIEDiOiCAfUqGc|JV1
zxGMbaEpzkj_IA^;L4D-35MeT^cYM4jkMjfQm5w;g@iNtLG0(B!*Jhpoxd@Gx*ZZJ3
zea}8U{o?(sEC%d|hxo7?UuaGA^&deBB22#``1>e3db;N3Rer*sk(^3>+1F0sX&Y|Y
zDUHm5*d`cTAEq35@O;=x%sq4~DG@$qH?_&^a8DG2FGuXW$Res`k32m$P;B&mX~}xc
zd7(te6?8vo_Qp`_;H_WP(jQnZnSYB@XGk+y^n4}x=r;aaF$jyXrr5E^%sP{cdSAhw
z-w9!m{11EHzJd06AoNSRbLKyaEb=7}J`g*6rTY<LI3DN4WycZWaM_F<xRPa|)ZaFD
zyQB2Fd3KJ?xYV7o6_9{s-nen&msZE)&rPI#*_AeJdcXPAtNQba*FKB9@V$C8;5+@N
zK}pRYvMNZqg)Oy^4&ucmEki?hEU#^%KksL^>dx(l68X65w9V`IDm1jn@tWeO7%W5M
zk?su}oWr3ZgGb1T%<Ru5ztYTekju&>8ROS$s73BYt1O;CNi~B)oMJ3w2yLiA!f8J#
zl<-OW$K;)tA<nRwiRmGes7)y9VRAoWaK4XO4edU0;@%#gfLC_YBUkcvNNQ2%2}<tv
z3HXW5aO@K93+~TO?tKqa`}{~?0(5XouIa6cYTRLSm_e;9%XTs@U+?;LSM;CO(Ck~X
z-Y(}>8rwe_!DRG%Kux(*7+SLIcK7D+xkEyOVchD+j~}-vG6#0@8<l)h+`DBhl;pi2
zJ`59dDc(L-HGxsqd-ca3KjdS{Pn?}s%+1lZR)y1h>>STgp5+>Y-6mX5gyB$U^9l0u
zpQ;_xccD1?p(^3%$B#F)r-puhpNBr@dW=rFa7p}EYpc`H5SN@kSMWPo%#KBT@e?8y
zs>udd?|#kkj1PRO=^eLo8PWq{22Q{PT6Qb_toC%l0Lj_5bZzC#@b>hSFHe%+8hhE%
zlQZ`%%arh)ZmuK;i#F<?lalh8w}{LJ|GZ+|MtZz^&By$2v6ua>pM$5vZoku{r=_*K
zjY0{~g-R}Oi77y#od~x~R}FuM(SW4!3OzlZ*hxx%|AXc<lTTm2%12v()7FsZD6W=l
zuqSE(Ou@~JcG8chPj2;P&uB$#i!;cVkx(0R=|W#)Qef}VmkefRW-rC;*I^47v}Esq
zH#`&-B**p%iN>mp#n#vB<Br@UFEEVvWEh%ngxM&>QqmixtyC{v+OvDNQ$Rp~bjpp|
zTSKkO!Zo}-83c$u88#RIL;DKOlWn#yF*&*5l_b?LpoHsJT;fM`6xpTgIn?ji2tFp)
zk3(wzd)F3se5_eoEtXqu-{c|41|{1d&iY}b-nx2K%My9y&ATf%qjP^uSN>lXkY$Qf
zH0ZhtyYKR5r)4WP(OXH4EkD7`%#0Z4#J-Z?RR4g04`ebkFaVDCVu=X}A2b~w+}hPL
zQk`;!4t;^L#zE`0v$qy`Do``c1-%ut91!fp8i<rCw)_?JTOf5D_hGiEvgtD<@^4|l
z&cI8DuCu8FssIS>X8Y5=BqBB*;NNhnF|qvE?RJ*~IYbbgZpwNw`Hf1RgFWN1_nO9}
zf_vW%fF$q`iHj-SyCm39Xm+kW8zQD#>GbU3$I{YuckjwpLJy+Kemkwj*6r*UD^&^U
zv19f#&zg3x&NgM*vL(j6ZH;l!n>`0^*s%QGEE3zy#T@2JzTGA5<{b^!Xy&*vO1^je
z-9-ZUMPIl7+ZkNwxK`_C=e{gBPz2;DO|3SEal#(qgjaX_gdbY<bMk6TMhdcTME&1p
zjN6OK%Qw<-Tye^=KbSLN2m%7)<9xEC@7w7t7|4xGA|&jSoC(Mo9(p5spnGqcyn@0e
z9KpA>4zCptLR!=nDCG`a>YbDw7&dfaC6(r8-?42aYNRY2c<0r#WoH~_zq&edEXRi&
zNAtK;?c|UF73%Mv;~ue%0d1<~ooH&6vt3-6?|!sp>3bIJzsH{|x$5pk_ChQsK)2^!
zqj_(gyw-&S+hBV=s=QKQzK%J}r5o5AR=;*dQjuCW`%W=p9Sh4xZmoP$Y>Ep&F}Gm-
zZH0V>6B83_)~?+w3R1wNET%7L>F7A)W^AcF%ko4Eqmhxy9(|W#dA?fybG)qOx^PXv
zjUC8!o|I27u&kqD7EdHg9^4j{CxH<0R+{P0kJeRcuTrICWY!ts<h(^dq%QJ1^t@NO
zY$@)#di?O=!|7*V%;=RLgD!dv2fvTE5S+7{Mvl$(+9C`9hbClIlsv+w&6_rbCe?)F
zi=q$o=;~#CEjhx7Pr^o*UkZ?WNGbN-@wM@+N~%#~SnWqkIA^F`Fko%<Q9*bM6p%7H
zV5}P;j#TdT6!efOxV4lm1BaBN?sKSTr!<{|H>}FG<_*6>NM?n@d#ZVpAFQ93o0uN&
zjn50klM_m_w6v_55%j~61kNcZ%;~TB>EYbrex<03SDUOkS<VH|ed?~SY;InENcph-
zbL8=1u+1)BUT-)J|Mk5$ol1!^l6@9=E@WLN89-Fsje!j$Xm&Zj)tVQ9od#Q1J=FfF
z-4xd`5D4yCl|0^aBgopDX~X@bq@;5DL~N9SdzWa*j^fp=^V)~|uYFvpxp(hgu4ag{
zEJu#It-*3|!Bdd`!i5Xmh|lbH><<nOk`~s!*_^7>tF;<7m#*Xf3-V6sw3|O#dxa%>
z^(FaXnm)R2EtVf>Bt&;(>Dp0|(;n@VztKx1L*X*^@n(*VO-(oY5666M_~sY(cK?>&
z7Fp_iB+m19!BPwzdRL$7UOkr<`W|K^RHErR1K<)!<7R2h9=Y&_8qlUnPG>xx2k+^S
zZTHEK5<2S;chUyk*&B#-EX>kmeoPUE2VkO9FaJzA`H=FqmS$I1*OO<?=+qHG(2cs7
zSECDTa`f>@s{_du{@CT$MT^j09DCvM8g5+j<<#iS2dM6yh~|g5mWu7+qPjjg^TYaP
z-J68(g8F3q>)%I4mHg`736>|Vm9Lz?INgUT($&<1fRRf5I62=F@s7+HMT4tX@4|{-
z=Szb@YDm&gQ=Uc2x@Miws}#-)H|^~A8&EG-y;vXP$t<oB&F8kobtRs8@e97_|Ha*V
zhjZEY;p3l_mP&&tp(!LYl#C=QS)nAGkgbGl5y~#v+1X^T%qYrC_DW?&cJ}(7pX$D!
z=lC7Z@B8QPkDudsp5wl|#pk-N_w^d*>pag_j%ruF?INdNhz-?=o)>6TV%V2v;f&(B
zcnA(bqH147315oukKTM-Jv2FKI?ls#`t&_$p3zEZ4b~pOZb8?#-ab@k@=bb69!&iO
zJ1%ZvBpepr9kBzWulE?oWUtYjlU+Ib717G9X1v$u^XS5{V-uP5{j!N)c4?qilv4^1
z4t|P;`_-#g3GLScTgSDDJzVql;>5(nD_5@y>+3VGdt76F?@ilPFaV6ke&wD^XWzs5
zaav6+db0Y<=I1#f0QmB%()8)x6ZhAUL#{|j$lL59u*2wHcym9x$-@B7j9N1Qltx0T
zQJaagbx%!Rz-oHa@;rSRz+SW++m4?+$u-*1-mVUp*60QSlbb2EwGu_vv+kqAA(CHM
z-Xk?KJB(D?j+Zvex2ytqy)|YJ-6v!cQ{O7KP!<MJ$>3Kt|Db*!PU8V|A<3LXfsq2A
z<r1!dVmoPGI0|1>|I@2)+y^GV_2yVxWT_esl?0$LCc%i=D|puD&^gWKArbUYyLay{
zv#rEmBQ~7B_PYJX5}gibN20)7n7)>~ZzAk`Qt&A%mY_5q-w5D1C>Ti1XhqJ(Cz>56
zHrLmdrL|vwXd-zb9;>bjuG*zpIb&kCk2N3Q#^i*MH9R!~R;PTj8$K*Y7#X+Xml8pg
z-89QVT_^F=_Vu`pWHYO9<<eX`f1Qy6Zi(dc`K@Vc@q78zk(fwS7(>x#Cf`|FU7k>i
zu5`Z`^&uws)xi`WthtHf@D;v)pA&8ro0cBG-genD_BwDUV_$p1R&t**Jlzb7vD>I(
zpV>5^K%&BUy>>Ar+4#lt=`ZRHm%-6_8}x8>DW|gJzPb5;&O%OldRdBM)*01h+~5Se
zlJ?Hdq!w@U1EH=XW?Cap|JGc>)NWu4nhlXH9alZIeMU`WQFRz#l5=$t0L;TjjtIxx
z1cmEp@!WZ!9dWNu2G(TU9}sU&>~lv-$EA2Z#Mw3@+OF15&2qkAkdv{eul&@CsQ)QT
zmpsQDR};kdsAT3YA~vPn=`NvByuA8dvlG4a03!LuvcM0MI6d{&c}q7>(fbdGS{JcE
zL?%&I8(f6_$dl@-CMbd7Z*Xv>K<};>kwT#F%!8-#?*02C%*^8H<VMaZ?y-kg2H!oO
zFNEaVpm{V_mZ|l%N<}f1SL&Y%TS)TCl?!5Gu4Tsh!hC<<xxPrR2^rxd&#oK})IG|>
zb5mxpzyIB@0|x|csm+wCd?G$6*?h<5ME)FmS)h$TauBNI8lkp1c^4BPEB&D%0PggH
zwqNVpGN)$4%2c$b6H^p7I?hk@9%Ev<np!D`eHPdYB0Rd75Ee$enVim$)67If?_htM
zh`qq#Hnt6wEy)f)a(Y&7IZGz!PJVscJyGYoyJgg7y8o)zQcg_FF%T-<P&Iw)b%^+m
zDh-JI0nnUU725<I)<~LEW5p@o5MlD)wev=uX3|Z<w#<OZdWM%xEm&(#7uqeG6zAHF
z?iVuk3sq8iiS>N(V?2iKzM+dZP$)sk(Ozh2;++bUTrBtSyRAz(@i~@EVXOV}+-a;t
za1RO!Iuz>RLFVKn6^ZY0T7qo}HRqkJuuVL|xI9(m-(4$Ad|<$B<u4gP7Kh^&^5a(<
zN*{S_>cEKE=c?BL`V}n<v(8Bw85^5VEl-phP<ZwA^)(h`okUf?;m*@qBuh<IDm-N*
z=49pNpHrVv3<}%1Tzmv|%{O=o-N?X*9nc&FKzwy?B^nx<A_ulLQBfTo2Ao1~U=IWB
zC2LCtKf4Q@nG6T*w#h|Z6!mXth!E16^DDFw80WyIttX+{%26`v$ft({S4w}DBKThh
zp3}%ik8EPD>HTCY)!8g&fAO~k{R16Y4x+j@JF}S_m2$PJb|HO_l)D0$zvp5_ACYk@
zPpZ&xc1cws<C3VTFl!)LE~tjv0M$QSoW9|mD(=sG(D~j&8yg~fi<yUt>RbC2DXG?l
z=eOv)dwSAs=1poxQ{|aC4BJgNZE^cVzTuzJ;c05>&Rz6^@63-E*{@pHuY(Dx&vkPR
z!?z$Fqc`HKtIP8oL#<0k18er|o7pNI&R>bcfjQp(SFy3^{<Y4TFU?OhD7RZ-E(Ew*
zY{;$@0H=V>TzOC7`ZaY><Q@>4IK@)b!z7`AVlWu3Pbqa+-#}~|)60N+3f{`m_y2lZ
z@%HU#;6ltpteXMNp$$C7%DM}!M|*+XvS?6ct5kGM%s1#FVZ2N>qJ&BC@|+Qt3DDs1
zZG?@+9lE|}$1a;<x<VORx-LCAzs}UwzDfzt>^<4Eg0`D528nIE<>lj31#|A*G&CO9
z0@o}LjXZyW0Td|^V@eehq)Pazy%e4}CZb1y%X9|Awk-Vlb0_=Nr6c^x-1|(x;J!Ec
zRk%5YsW$UGN}-nqehR#AY<OiOBitLkc059OhlfzQ)y#VKGXVcz`#&BYFaPO(%HdKV
zYq@AKJpKn+k7L5MANHG3d(#o-_tEgA=&JgmoqyZW5lnMOxGO{Ni6C!o_@CLE@b1Uo
z4xG7r7<O16S+0qTe>Uh6)mSsw+Dj%<FO6>32eE0e9itK_;L7YnAsERx;)#AKZZf)V
zgmFX=(89u@+WFohD`z|bVDu;Qt!6fJ6+{LGp0pTSdaoWLA-rsN_p@EL2Kq;32QTFJ
zhgMd}o4y&M0Yx6x@qK)%prg=|4TehrF;@ea<TexEo%*)A+FBx9xrvliuQ&ol1IJj}
z-o0mMPjNNOuB|dY82=eObB>*T_oGLTP~u~L97;M{x-@bsrYF$#bNhalpoX3*bP3od
zq)u6vuaFi#IX|xuntqvnd#8yM3n~iYvxOtlu{OIgXAG>_?L0<Ww1kq0;Z=);Mnp&w
z)4g9J0Ck3|{<JNZ_FSex4R(B)cMU#yn3V|2tYMa*)p)e!&Q=%>-!V1-srh!=zJ1OB
zf=gECXp9#D-k@UT(6z@hMKlA%v1jU>9Pq{+w0tklOV3Uni2r{14$3yn04jQVygGC`
zGGm9EE)VaUV@gr<@bYpA47Bv#1xklAaSx$#mEW^xkAOm^eD}lfL>y+w5sIbgkBB|O
z)w<%@mNP_v+3NyJe_M?GiuOLLdHJ-l!K#CXPQ+f}+fbgPlKt$+jYsf)C!L&EJE6ZU
zn@EAG*VMwoH9r2N{o1*j^?8i=Zl#xzZ#$&I$L2#Xq|-@z=tHm9-@@a8u(-;F-J3Md
zRtF4hA$WQgCAa1FegB@XX!h{H`FHG=<H~U=iSp%LT}rzNtN^h=YHs2S1-@jsWe|9H
zw6O}WKM@AoidFL7Lk$sJU6SGaSJllPuy~<I;uuxSH{B3+-ex;zE1vw@rY4Wjo;P@h
z8MrHXjEU3E7<q5rqu=-AK&R&RU<h%&)ZY0epfca^aPQXC(m@@ev>VBBWtBAxg@zsX
z-+E9SzBU}rW5mbh7<=jH+l8s`Va=4=Npap|r;m~nSXGOj2s@Yb<!X`MX>!APF`Wpm
z4->d?X|>y~fu@GE&a!vs_mZLmyv9Xk+YWu$>w4MiV4b0sfkASMo!@VigE~%N;u<pt
zn<ttT^EX51;)rKLtk51NMimGc`SqlIRnldse}9mL{Jn)|)X|2+i%`8W+U1F-XMepP
zCKQ;gg&KV6uTZ)523B;xZ&8fa{I~$IAa$l&$3c?G(dUNM-F^|bT@^n&%+BbHaZ`Z9
z;+j0F!2EWdppJX&RG`XZ#U-YzM^+Q$?Sv&d?*M8Ach;?~ZkYs3V>T$#dD^qoZkY!S
z{$up^F%Ih{>~>2#x=S6@M%O-&kKJiuc0dB)m~R3ekZs%(Lc=J?!LbLV7&hN!%pvw5
zS3g4bf$Pym6l?YOUcbg_DP9}vyLTC3!FP(f2_d$kJwtHwc|im@bkGv<_YrQ#du+Bk
zt#42aA-*EPd|@aAVD_Xf+fZvbb~ewColx{}ii9Y4LGTP38)-{pyLD)^zkid737gI;
z+UY1WU1`db8i%hn8Fge*av9{~S)vEq!Napt_<Ga6ZGX~Dbi#L#0YJ+?a(2PJ^RQi1
zR21Jt3}c;xq_+LYz(DNY6><O<LjwbKM)NHS=H_2?W5vtWjZn|mE|y%3`pOW*sM6V}
zzAA&snrpby{EynJu1)`N0V?JmiAza|0nsHDBwht^z!A*%=(R*B4=q0R^~U3BMGqh0
zu^#2(^6L;&Sgm~TLQ9y`W~EQ-elXJfRIk)xj2UAeig(Q~vAx_ZraREpx>7#*=1w9q
z{N}O`Z3TRaH-${$Q8&I0+tOAgtG4|!V%0=%sT)Xc;xPEW1!pQ0J7tCy+jRozL&6e$
z2D<G+s6@6LI`O9hl-Q_Z=eGU1VW}_rYW5mff<;evR90?gWi3B^3x`DvqhQ{$KtU9u
zA<Hz@P`tnc)2Vs|g|T}7hiC1%Mxi&C6-(`D%_NDH2*5_BPfSQ7-v$QW&wfKcdjOR{
ztmZOBYYJ*!dSK5ASDi47!zQxN@~Lx3<BgHRBElCx!x-!^3(L!nI6%h?-1DsZZ<rQm
zpTwsx%}%y*RK0)S7-)S28|l9<z#%mQ<wL&dH-6r?SAjQwwcqGS9A;q}Ia=hPq@?s~
zxN&2ivFO*yZzAdG>7UvejvaGOtmy3MXe9l6)&FuU-c?ox=%Ls8@ZrNJn`Qnj<w%ml
zMRg#daE)Q2E-}>nbLPOgX`9An{G<!;&I{JYDIT1Y6cgKQYiAd%4MQ)dGB*?@x~zsb
z87UUlmaljBVH-?2oIc;O7~qBd=$VET262h6B2Kp}riW%--gE*X%jJyh?7n*I@bcTl
z19sx0(`Yob1}Bb)xU!EGNl3BGP4qU@?YfTw!k<c_;2z-GVe^Dr&%$Phklga|PFk|~
z9N=m_9-)LGwQeVI*UrPM&q7gZ9^nbF6DV0<v+*l_4P$@J&aUjm+oLu@6I=;Od9Q1&
zi-tT(Ua+arA#Z*!*&V?>x+SL#nDg&<0#2O|h8-Q&?W$L7R?hARg02ZrOnK-40r{{B
z9oqdm$r8=hYf@5`=u`{35b0jN-T!L5D~}v;i~Y&mE3%Qf;)hdv<NU~LgcI&*Y0T;1
zea8Ou#GZBZ%f8Q_A5CvdxbB>MdEf*JDjd7dOj)MFdM8mZeDjX#DRgj#U3Qkx^6Y3s
z%M(vHZV}i0?KyO)oW<l*q+ru)dFBF-#tmOFn|ru0871u9D05KMdGl<r)ByNsdp1?q
z5+BaZR88IQVOTP7RY00ewdg~O_rSD-C++#0+2Nnz{23P)8XTO+b87%EV!Fe+y^bPg
zIseb#z+Tbh8ZNL*#cTXnv%+<@n_x%4Om)les&bVob}@~~6rzhum%23rM8(9ugF&Dj
z(2^Kq6MdugP-|_iXYx1n0-LpK_{i4mSEepI&x)Y3p}uc?+AkOrwdaa}@i=u3vmQRx
z_%p3^P2YFTcDjEXKqOurMQd!wS(%a6QAAdF&`IB5Inj|d6kT<g@X*?tb7R4V3m6HJ
zYNgA@R*My|?VR<zXKAV13OF=~$3M+q^z!At_NhLxb9qj`Lig1`doVdpyDSKkeM&i+
z0P$ESmx9Hpj^HIAtvETgf?Q(i6o2Aj`2ux?Wy0Z)b7&Q>T)?YuM(4LYZ;qoCRQf*4
zIrl)H<!kIMXj;QGJ?E`ED5YsPrkgO~VjpuOU$5V3v6%pja%eLX4R8HrcArz#5ZZ~K
za3!a&XIWmDI)>!=!Kl!v%VLna_Va@P&asrT^=zFwc3(9g3yPbibX(j$cbA-$@B!>~
z-@zF<hP=>n-4*xd_88Y~752~Az){xLMumR!(<1eWz1xUoCWbOPzBgM}gQ@W5ziI!s
z6Z|tpal{LrNuMjr)W&r6*G47gfz4K$=MFq|$=hw+nnK^4>*4J!CL!UOU^jUvNUg*+
zaSqH^^dqKJYHi8!Bf}VCZpr$B^*r3}3fQS#hN;FT2fQ0ycPiT^O6jjF(H%JOF}oB<
z&#CT>iU%xj^;3?3j}_z*`2J3w!{RjM%zzT0rAra(wZU1<0VsO?^oZ4laGEo)^d>>A
zN{O7Yiy|VDoF2POrkp_V@G?RXU6XCF@5PzYv{6L%vt4p^?^H31dppBy^2r@J>>|T*
zZ_O&&M6Nu${ttVc)p!9bycDo;4ZVRq60xZ4PTFzo`*R~Mu>x)dEI%W?0{{rfiECDa
z^#eiXyhfd`ER+r$IDj#zWpM)&H#a2=U{9wD+N~~e^M2wZfEeaF`b#<1eZ=WjfSfLl
z!gD`AQ5Blj+5Lq<h2Vy4{^7IIEcK<xYNJ~3)9#FVy1>warDqva^YcS|<s^z5XcX~c
zT(q?<>NIKyJKu1)>Mo;KGyv~Ic86v9I9{IJ^DbK<`DV+j@OX^MWR>XX=pG>)an?-p
z^%NFng{=Z+7Kw>FZ}P=<Fd9~649xp7f->~Bx`+JRh`1aG=Xn=;ZAcsN@fB(5Hmh|}
zy)`B3!T6#JM(|y3vx+F{e~FxX$#jx(VM%KD0zGx8)7&z9fA>-iTSpti>C-z4Emos*
zQ*qm!kC(uU)xUEZ(UW7W$fZ0){j}khvf038^y<NL*p7URb9xuL4|jM?SG2aqT^PS6
zBB1rK;ia$dZsWrr4C82y1d9n{uyF(=y)C;A^#{bq$M=2Qm)qJucvE4(%>J%LoL~UA
zz`TkwCcu=x@rp}F-ce($VJFxDRKi;^9zDmobsH-y&QX9IlmvC1x!|`x8OjCIFYS!4
zcM&r#7P>^wSKOwFN9T;fIcE%+w!mz)=%DO%wXFR#G&MUN1Gy{f&1%5htvyY)ZP6q6
zLMwpoSA$<7o*RqX3nbw+3oqJ6n;BsflFb!uy0)1}R#cF#87zC`oNznm;9zaA$HKzH
z!7POxM2bI-{+U*|Q&6^JZ`82n-&6H?SI~7T@Gui6rw6WqEU4e}8kw2odhq2-n}j~x
z#`=tVt4ro#K0*`G!`<(yN}KgUfxdDjM8ZOdvU>tJm%h)b(52aq4FoXYPK}(M=q{*u
zV3DG#(!$Z%QNWTVz*eSWtf{H_DaU}<kFH|Ro^Sd!R`p-`uM37ctZ8g{U3)5@+qgSO
zu>t++y?crs8V{pmE*;h2tM#B{!cgGZvu9Dc^)o|kK^CfFG$OrRBdQOyv3tY?lfIzl
zd}fu99wFq4*7mt_QVW7~#s+D!?{CEZz!<N!FgU`<`VUdV<tynV>Xsug(Ik<*a(pk!
zY1W|w6}OL1&W$M<>loR6C8gPvscNx4UBkNc{p4R%ZR7KxpeH!%WIr*3J#_lw%*&Cq
z(u<$c)YOW-N7q)DH!C(Loho|oRA2=t`sdgfsfDiY(4p0<%>JCT4&s5VsaX(BSy;qg
zs*~L5Kg&~^<9F<`cckTns{YWE4t~2O3fMoB^4y%85Q@xw8PB0wXd&5`3%qhxP*6ml
zqNw%@diW}gZMnTS?uWGz!wmlm=p<6c3by$?QP&}<r>XVLOJB#{(}VNR0s>r7_Oov!
znn?g(qp|jpv}1Drcfe@t&gd_0*iG$-A!l)}+>61|ICddPpyWz!*bVeK>D_%$p~m@B
z0WJfdIS3?*2$uBs-$CF#%EAJl$<1HkpD*^q!|4}>?%jM7Bz=aOTHFm$T%4S~K|u*^
zv!t0MwTaG_Ea2Jmjrmv>O-=orx{t{WBgOW(5@M?hq$CO@{W-h6^z=Sk$mx*!FKpVp
z`QU8HnSL(U`65rx=AR}Ds43%2d<7|9^}f6nF1V_o7547kCHbWOqv?T6F(a12sD7Dz
z28!$|qw#hT$5r%K|HR0M-Tb{r<TUy!3Fwa1)aU2s>bE5|gjmMEdi526^SK!+k-p&%
zt*3zi>KoduS~C*4BpIr~oZ3NV9(g9c?%N-me=8S-`@Nhxn}QTKhaq0Zx#313oY}P-
z01g%wreZpC0h9vEV$KEYz4p%F7g0&x6Qy)h6gs7J1_n{C$v;#nMC?=EGGrgaU4xct
zkBS3`1gNiR?r?HtoAhq@^5qK*^fw%$r4@B(>%#B~lTLt2SI4rrOd@ZH=x6>-eN#+F
zhzzgqa#4t7SmqJc>HrQkMX?Wvnx<UGCimOBzi-LemG=`+9-mQ`*iMUp0~x`Bm}WlV
zx0oxas;q=LG?~}}%$*Z#2hT;I$xgfC`K>E&;x4tr6yI!CyXZJL0A@9{wYBOxI+b;o
zqNNT|WH|;0UghPLjyNb};9W9bi(*bvUjjzPy0vS8H3Pmi+#a*rU7Qx5<F84);Cd*m
z(&k3)(m(;g6JEO{1QeZz8HrP=d+Q~WOWJKfx-?1>KD|(>VicN;m4(+>SjocQuC1H^
z<QqunA+Yo{_$sFk1<(oFCfw`dHF5o6XA8D1X{V58y<Ba#PhPr$THT`o{vaw5oo}bN
zj@_C3dIW=^#<LD=S57{FZ>Xg5GfCC>ABOLaGcBS(K{%b|6C=Ju??1vPe(2sLG&`ZS
zW*q0vDase$lKT7%-AuAAt6I3-*hJ61_#aTVyX#TKRCyc-U6O77b?GmPxj^yM)ALeO
zTwOX^^WwZ4cx^}}Wo4gN@@YO-xLbp%?UBG5?pD7m#~Hy$!VUv=+Xd6dE<NwOXrk^m
zCp;7OiH}?r+#!(n`nq#*<gFBwmnFjcDYv^+&RG2#ekPozaew-JTn}~<=}CjyiUNs2
zzYB*eK_-d><g;{*3TtdYq9zU^AAUWj#g9ByGko{nntKSzWBqHwOLb2NrnKrxg3?r<
zUON-^=f&u5Z*L#w|MKS+KZ$<CfOp~u1B2_LU@7`zLgrqo^yg-(1@~hw*volLodee^
z096x7)zj4;`+3&$?Y3VcS4HjWLKwWB4{4py*%clVqW{@!BKj4P8DoKC9=^V|EUjKc
zb4!kDT5BiI5pQ%teO)G7%DM_Yyh}AW_fSwghG+5Ho?^O}VKq^ZY;4`yeq4Nrj!Vb0
zbGqn}%7$SI{^x(Yl&yaT>!uH*AE2e2?R?FrA=gHbv)VYUU17#j>v8Myxo{Cx<!-s_
zV^*`%I!>AC>FTXq*?ro=Q6C@OV%629`F#B4)4K6;rJ@uz&Ha5I_rj&58`zh)Kh1}8
z<WQBMyw>bgWZRH!H~91b8>zVpw#vNA*4;8QGkNzU<9YLuGsN=zQL#qFW&%N4nr)D0
z9n%Anf?RwW7dN*pc1-`KO0x-tG}R;g{3Mu+T?Rv56W`Lklw#<=-Q{AlvQqE+1jU(J
zClz%DowcB6QC8ys8eWT?D=F#_ReWOJx=%#-?n%^X2eWoMtSs#L_|b&S@a5fV-<<@c
z=R2M68D4+lB{&`7-p+A5Fn98Sv|RDThOa;5a^sZVWb3a}u&KUOWaHzz-EZcbnpco7
zf93;mwjKAM+4ki``J<><Fs2}9RnB*W{qg>>F3a5lLaW3x>lJja2ZZDuCB0Z<hPHYi
zF#g+l<`x!}sD3M(6XkYV@RN?sYYZ2FKg-obN6#j8jk2&T*zID}Ztl%Hwz1`Fpa{-4
zf_^2@Psm+@L1ccsXV0EJtdoUYn_O)x)3fJO)~I-Mt**W_k3GCP`0nUn@JWl6!9X3|
zB&~D2vEm)0vps)_J`{r4v$UKiP=B3Fhtw~MIL;glH3>38{4i|R`dpPaGH~sla4onT
z&-EN;#k-d+RKFG$J?e8`3dyOJn4Pf>-*sF}dJmU$Jhy@CqZRAy8207a^ymFZ>&^@>
z4^IdF`t@K1<=)n9i)28m-2jv2Kb(pdp5Jru;C8Ie0{LLCWXPHKXae%hQ&Uo!mriGr
z^y$wS|9$BXKUvoh`wey8LRnlv!B$jU%x*P(=XyDhhoIdO`xsIIpDx$pe6K_BoaXzK
zOF2W@n$=`%qq#9LF$r@;)>dkj7-Dd!?YaSuDhSb}e5~$H50j*dTFsRWxV$AEf$7LG
z*4q01QVyGHck8QqH!8#L2$^j*hE<hoTA6KAXiurRbh69BX=~Ze*QoFy=U`xgdHz!r
za>*~W&qw6xx40Lim6er|oNw4k(;5Rz&$oujX4hXn5rNp^up4(jG`0e=((1trZn1_=
z9CMbg?*7&@3b|QXF&@+FXk+eD)V=Li4oDlizPs}yh^N=VhRPY!<~#s=zh<YZ$@U_L
z_3$62faH!R3780*3YU>pMmA8h$JXX+E{Eh1%cmCg7dTF}hGm-EDyoqUC#5Bh%~<~z
zHkS^qz&>L|Of2iycq6{A%*!z#HI9$ZrmMdt0Z&#mxoj1TgncKMzAsGmZJyF**0-lG
zdVCTDpXg2{MaokT`kv;shfwX{AkJtjP%46GD~g6Xr!yXOz+B^=%_b%$eq({Stx*?A
zHFjUh7^)`APdXJ5(yMH*PpsFk1yF>0$R?h-d;iFvhkSIM-F3p3Y0vKTZ5Sz0v~Sr#
z?TD^`-C^0y)%D<P(8H1&nh5Fn3D#_???$<KSrlF$Y6|Cl@{B1>5tL@IEL@h>Uj5hk
zn{;{^QqJ{sH+Y@0ht6AgD#pn(PpvGPU4MITCk9K>#0q%RW;)>t*PX%U$|@=a!X%0l
zVpq71{Vg?n{)&Vcn3>&w*y@0C{B++*q9Oim6Eif2={eeDPV*C^tRH|-aE=xIWU+!V
z{F?-8AG%d%$b7f{ypd#kBuStl19hnlbHu*AdxKU1F`kau9(eO+$VLYJ+fP)epLp97
zE)28eVd%ZEy#DKIcQ2@Ejicd-idg|y!x|7Fg4pD>IfE0_DG5p`(BwXxuYW+=wLCu|
zg2AAwp+B%D$4OFSi}dD`(&1Y>gF{0rz%s*D%{@Pd06{E%CWjKMmh=eV#fr|HQFi@i
z#-;lVe=qUQ38N<-Tq%9+#NT6fk&226Gu0*1Oh`x~aTvSbn0x4vllwRZ1}a3I^I2(?
zVwO*E#BAwl(&*rzEA~pMV+6_2Vc8HaAOeaN=^TJ$JwpgfB$*d0QE3HllRU_+Uu%Bw
zw8Rs0-yv-sA1}L<X%M2?YKQKQb$&n715l8CtWx#W;eh`Nof=i2IzPqpudg;=m6CEz
zOJf5b2rP5s!-v@-pp^l9zk%?p+~+ik2{&<v!K|Qn^x*v4CX$C_Q#0RxD(8OkifwPd
z6;~{Apze{dvy;<q3W`nV&x02FX~SuyoW};V3NKC#rQFM~EVdpe^2#u8l+08E<@Pay
z<YQr_Qb^3aj9}N9v%QwdRl3fEwUqn399>Pyg*~umF4_7gm2YRNoJ81!JjnwvBowE~
z?Ol2E>aWev9o7t2y{gX}nd+<3?|M^E;L*8dqS*Gw=UvgAS*=cl@^@sUIXXK(Omkpz
zI~d^6NF_;oJ4=Te1EcfXv(y?qs2YMTwiE7#@Y~GQek~OS_WKAc`)*7M9zAw!<Bg;z
z(%BqlgDeoHc`MFAs>!jDpmS2Z;Tra`s~G-`nV&W=nQy>MQ6u=gC0$-^l`f0m@=vZY
zx@K7>jQ6Tf3q724tgi||lY+AGQBQffQ}8{0HvSA=HY5_Q&g7ev^G=Vb?oJNYvHLf4
z2)~)e)Lg`CnJAYd+353ixbcF2DZEC8n!jl`?)Kvbyj@-@GgBXSrG7SX>SK3rkxgZH
zw{o+<%s^n=yzJ={CtUPQKEKMS%*B{Kcn%GOUuggbhtDSLB-jjP>Z5&=v!hY^*dE=s
zf1r9BSK188E$ZhGRz};eZte~&fCP~^lq-4pPo;VVL+lVe6KGm0b9d6n63PrAT|$S%
zl%6$sJ5Ivh;3R0Dn>-3zK(gq5`E@?7GUoD6$Kcr!J&VD$ky8qOe1TOyTIYsj)2?)<
zp~9=J{bKd)#HEk-+t=u&K^|>2=)RT3bHZO-Lsz$orSC-PM-%txe-V;Rbq?EZ7<cDC
zLah*O&}N*Vn6<w;FpXd`!HQ}{D1XC(va<4y-1X@G`L{}@HQQy&oZ|Ndaq^!|e4ux^
zu?qyGcf=8!b@N?pKH5Qf>P_U$)XpFw2f=V5hkB!vVpXh+K%52mJ2|KV26g6s(tEP=
z2%Ro1aQggH;vNeX<TmQS4r1Aa{ygpSI|UDZWR~3|ic1_mB5Zov^KaX>O=7uC%^@`-
zwcUJoQGpoXvcrCQbIITI7#kbOZwS)Z)Ey+mty4r=t%e6_v76tm3(+`SN;k$>YcJ3c
zo{_UxZkGJ`4j<V>M+pXJ3}$}ID(2~Qd*@f)9W0u-e$(lW<AmHlWZ}oI=g#~&a8Erv
zv~;)$nIxm6q+z?mo^?S?53rjv?1^KF#1*_-$*NT~W+bySN|CuL==Ed(!ChY_!tPC~
ziO<POFgeaK!u;Gj=|;zalaN^^O)mo2sI|txtC9NQJ+J`Kt{s8EBXYV8=jA0Iy^#GK
z_cuB^I<-5-I&R&*&B?WQ<ENmht`}cPx%$GCRMA#CVfSXziaB_{pL+VbZFHg{IxP^(
z`@9F7`T=Q4EIX0fAM65*8l*Q={FUPbHsZX?MqE=;U&iyizqUS_wp+L$Fp!t4>(@s=
z2kO~F0W6B{UNjq_>>{=p#>LPId=BLLo9(H$g=-Dv-xJjD!hZ8#qisHX>{Lj}B%w%;
zhiI=E7><7XcI49`XcM1J4EaWMeuN>xS7h{bT?j-`DGhlSVhkPJKkMWErXd@cA_eG7
z`dv$lr_W@VX&AgfifnFgg?I#sY`>@T?Hq|y1s^ahZVpgLlywPJS^FZ;VnDlZUqwn=
zvI3h|$T)HM7$O1E8*kY~VVVE*Q-|-aEhioYY>p)U<%=q_10V&3#CRFT-I%B#xyM*e
z2-X@YLQelP-~D;-7L#vj@V*hFkJ+}blFOV#ZfKxJq4xbMD=TI2EEbxcpmyF#vz==3
z<cSj+GlQoS)Jiv4Ziv6tTk7OEWJ2UbKHX<mFouP5>>vX;(>KHq@?v<VqCs5)G(|$K
z_tmSsU$KAr5J4<pUGBZXhLDG8HP6!2@Q4yA0UVv(IX);T(WyS_frbKFOPQ{l%>G#C
zv=%)WSE-t{dD4#)1Jm1Mb5{1U**d8+Cl?R>KG-St0zPyCnw?C+pW;RC4(~MX`0(ue
zs&31PeePa%wb^-w9Zq^|I}F7Ci7^yWzjeZ5>Lbm1-JFP0E35OT^WP*<H9-&Ys4H)s
zID*VK&o$|NJ)Z&6l#?FdHZHS0_jqV{jd!meC4wBv91mtkB3g1m*5BF08dyUb97#gL
z!$Er#>1C>de5JMoT6b!&!m?N(S03P+;D_+Np=YhyUueJhmZl=Ga}T3OR?o}IYGT|D
z#ln6NU(4S;En#+8TT7N0=ZB3zOF-$vJq_757UL;AjKYwGIn%}*Q7a$o$a2$zo?&xS
zA}0-R-kSuaz_4v=P(w2ag_F~2ZsCXGII&t6s1hc{gVqd(D6{o?Lc&Csh8ttV&aZv_
zs!lX<9x}V~K@A$yLs_qji;F8GU;jlzgoi6vm#<3{Vx+_`AW$%dwTc_DE6nel5Bdkn
z1rCU@IEG5mDJyinhP)Wyx!VPh8Po;Q==-M)`Kon3MLWkE)D7!D;$$5-dw@+U)#=Xy
z>V$?xx%E-{`fTvBh{Ch3*Jxi86dHP7g_EIF(b0baAoND)rA-9X#Lg(@wpBuJZ6-RQ
zcJx_UM@L7(&{@;37uq|gH_9b6*`hl(@oxaJPpg%Smsi2&3$Ydo;)n^>2BV_B&ER!n
zgQW0(v_)qa#b?wc?@kvpdcqcYqf)M6C9pU7HT++-kr@~puj1oJi%rZ!B(6^{e?8s4
zCG&ZQc&uUI5IEfxZEbm<yi<z=O$jovXBj*?;&;+{lNQK#8};+hWp0bZ(&^I@xzb0E
z9u2yxMNo&r7*pS(GF8Z2i9%b1+3T+x<G=C-N&?p=<qpVcl*U~TnggNyv(LeQqWv~9
zG7)|Kq)Kay)feycTRA_~?!&fSp0i!JuItg4wlyvn+;gVgq}QGvrN2s}QyWyjV`V1+
z6HD2}m-Gg$4<Gp<Cf4@YV|dQJ6hpD!u3s+5#!roWahBR0g&SwYRZVA|y)F@+o;z$8
zCLbxbB8q^7EYWNMcZj$-OVWu#xA&ml4441aiag#WL%4vCcWgH;trt)+(;9>c?1nvg
z@B6!LL}?b1Qdw*3X6&4J3w83@d*3&q-%M^jFbAUCE$B<XR4suP!7;`eyh9;vjg*)7
z#${=uZ078}i>c0x9v~#Jk0D@-VB{d|aK4=8A1(loA!3tqiS0Jf&^2?Fvc#yV*#!l|
zPceHPoE3mITV3}$)Fm=0w>WePfj1}H>YP(1AxaI20<lK|hYu6*r)->BHX!9lEJLu<
zn5u*^A^r`rV+oyLAhzHo4!0!7x7q=ebH#($HhuuV6Y>jTeAiCvm;75qj5>;}$l5gK
z=6lJxvNRnaUV&)hY?dSfE>yc3(^`uFrzPU2ir!LURJE~ypKHkM)~%q!O%yfv&Vrf)
zVgYaGR93D4>htmPM+m%c-@kV$iTo!LZJoKJ%F_vov_?C7)XX5>VfOp|A4txrx_m#@
zG(Iw-pIv6G`RznAR&p`%s)tGFxIzlYzHy+cQm_(}<?VMQ(%D~F$Y$QT3WzpXkr(~|
zG(30C?f0hUcpmye6LTI@OG`N$I%qJeX0a<$9b@xJdkDu^q5b{HGTNDQ3J;Juot&DT
zP`Ym4-XBhe*>4%LZ%{}Ds@(kf&L?}0<%gUyQO<aIb^`=TR=yu=JuSTPIH6r8>PFmA
zW0K&!xrEZ#*n*?A6`WV*Tu9F!L!&;58QLM51NE8siDH*7oo(CZP`;_}^g>%~gQV!c
z?`HH@rhnf}$U->BfQ1e&(fWg^h6;{k88}ezta;-d_mJKy<on<`qN`|UPO{Vc8sg8r
z)h-ER35w1P^VuZ!prA`fg^^%3%@uWS_l<4A9P6ubsj%~s#Bzj#Do2MP_|*_1oz9Yg
zc%{<w$CD>pt03&ma99_FtdO$Go0ePudzkcF6V}j`Pd}%%SVog0ruTDB^g1}&H~)Pp
zq7~mfU?S49XX)8Y1E?VbI@8)wVt2XZ<vQ|xLCFmS7oDY>i;JhraPV?E8&VX15^TX`
z*h)@LRTQ|zk=x*AMOBqs2YmA{Mv@Lxh2#VUQR@hxmBEVhYrcmx@Zgk%qRX#b5B>Z0
z`r(ZoTy`b)Rr@@4i~1Gy9xDJsLB5~$SD*JP92CAnFxY)KlTEFp|8=a6z-0)2!2q~O
z<?;`ytjzO`BUEx{;jyt5z;?gRq34jLT3R}TDL>=l!T>$I4_*RndLzM2hs8k!#^4#?
zg{9{11JH<6UEbJuT}B7V9*V)^Cr*Ivu>scvURx{EwQ)3|Uq?r49_Xintu+3{>yoW4
z|CbU;S5O(N15Ve}b-u)e=SK2Mur|c}<@o49+DNiad3n58zv%1h>xk?Ub<t&ex0W}!
zAcdAm!nyb;#GY_)_9d+N#k>za4GOvp9f=siMS-Td#)-q~`=InWY8r3`AJ%o}D2L`d
zQ{|GCljRi^M7=Rl(TuR9&H8SO<BjC)JfY8(S=}TU_O*j)yb<cDJ9q972=JwR>gXs*
z$W$fZaa{n}zF@u<$?aKC&{kx<94*BiMH0k<rMxrez`{i7I^j<7D-eY8rIy=E?9RhC
z;8Z%1WvrM<G%$Eqy1qt6ATs^Db_(rlCKp<X+{@nZ;^|YX#|OEaOHDOM%~0$zA$BC>
z_JH>}y=n`lJG*wZJp6TB7d<<RZFnJb+WfcIJG|pEnEjBvd10W#;o!!Gcng}_z}ee3
z5@a5oBd=pagBxrCof8s0v4so{Ry2EKF~&d5-DRw-e291hk${9dK1GRO|GVx>eyhDv
zQHlo&;Zo~_KII<O10dBoSM*P!+14B}0BQ>9flu`irs&@hEow6gbQ|aZTDqNgb67g#
zt!IgqN_YBcfw>7M%6~_IHMLCB^(|2Xm61q-4FEo|jYu#?^?KM}{5p0}qJ0kinWeGx
z>j0EhH6%7f`t8(rQjBkR0pxw}yrq$-f`{nudb||vU@ktCo3C$akhaN}A`RBHdC*Ql
zk1*T6zCH`nkb`GFL=N2rVgpj*H=qsBE$lQjO!<ZsdGmbuIlnPe0j<g%FV9t|cK1T7
z_+X@c4_ZD^G1o(LbFu0sCJn{9-~hT|C+xwo&XLbUi>d#>x|=jQDPk8*c-}0iQi!oC
zpCw1b8RQ28z`l`|Qg-y@U`h_O7e4smMDL*d_GQJFLd)LB-<3kpIWvZ$BL3i2oTPKz
zg_h)?k6%W5z>w1GdCJk!bI`BhkuW!lzOi_VV}HXiDvI~(zyMRid85uVkZ3zaM9}Zu
zw{HUh?kwe~H5$Rl9kiDY<J11UnyFKFdtqV0lv^Dt`?!Xf3`Tu>vk>-NFw?XY)mC5R
z_$tC6<II^C_MiR<O+TRLmLk&oBK$VVA`W$skdu?=+?KMh+vexzw};}vUbF*FnTEYd
z2e{&n2@29}cOe1B)1*gx^TC5Npc=d30B*0w@cRCj8aP-UjIf(KfCKyCSLudKr_YGz
zPBBW<mUW$AauyiuKr4HMc|?$o|B0BG7+(^)JMb;`Coab()D=Sw_)<*flbveNs<o4|
zb0cbvw^>A=Y!a1cj3MB6ZN(l=S}tMl;NSybM!8~5@HdRu7Up|(;aA}V^P98h&&MFK
z>F2FhkpEOKLbM?YklSH=^~33(0>%4pfig8caO#Y4H#M=RaF0>MJYo~i`SU%Gmm#G+
zcGz)UGXY|R+CUQiEvoy`SYmT<(<Go^t{OaQM5yHJXGt70wCwV=q0xB{%wZBHpzJlL
zSy+fMNN0Cx_p7+LXq$ODl4Zoj#w=awajTg_WD!CRtRvmqHv;~y@)649vMVeoxW@&b
zZ`9gEUjL(TP`<a%y9DCZtoPVyW3$CSlgQ#Gjx@$PySlhsB#g#`4Z)Ee(vjuh<!!L~
zaVsO*qkc6VOEUr4QsUWY1%RmIQ7u71L!*?yc}VTe1C*F$AS;uB;H}a|O_+T5G?L_8
zJUUCQcTc_%tpZ-$Na}ZLjJZsl(Jnpz2N&GPY1H`uVe#2$wvLfeopM4LC|z>TN$v7&
z=EFOuyJu<}gx2|cm+!-G=`6fn%*KEA_diB3AQIXR=FI?QU4i8;DG!5ZY#55@u=75&
zTskb^x!f>(`}W9LR9<FN>9Dv3QtVEoP&eKBXpzfv=R!?c*@cD0)9U)n9m|?}(WK@=
ziN_ciHVX?2PyV7{RrkMgd~$M9X4Ehu6sPKbO}L<4b<4REd#`$nWFIlV>T>Z}-#g}K
zSH6DzO4zbxi`N)3M*ac&W5<r&17HiDY}m5l5=en(#sQupuT~|r-E0$VkQR9M&+Mxy
z4h+?-#+Lc$^eIfeU-Fr|2k&?XLp8i0uCj@>1ycOQy9xHIvkGx43X*Y*i+0Bu7``KS
z6CE|Ol$rhSH)N&P$DlNN6<zS#kw>@(mTHl(&8ZcwL`WBl5G*!(UX);?%8&bo3W%YH
z4b!UB*6L#*3PG^geJ`3^^rMN?KFAM=MMX?RNN6aRc>_|~FD=(UpOf9n$yo#>>-rs=
zHxW=>En4%#y2LSFSJ${K1sjMthN$qe?tOYGweoo=I;Xzwf~@W``=a@2s}3X%)uM-Q
zS-9pxa<Fjs7|$FB(ZMM<D>oO->^O-Hmc?TH?Ect6_<9Ix3ZJuHWfV(AAd4P4YkGm`
zriJ;W_y&T|9>}Ag;M&T1dn1<ZnEXD<z#!Ah;D}k)JuQM%IR8f$t>R-F+6~zMmatB{
z-Cq1IEFKo&<?uSl4fF67%$A61lI|iaxls$e8f{5ypfh3@>?Lp`!o1}mBbpuIh8{Ar
z(;6(Q_xO+I<K$58ARUqIm)ux}ZZI91*3`VA(NU#4m9vOTFv-6YmUfH)Dcc@wW@ef+
z`xs`WLbHpO&vSBeYibvELMxB*Y#~3`n{k`9;Sx{^q90XQ-X2gOp#Gpr${>!aJgfz`
zSJiC`>l~okxMf%MJ;yrYY&p0i<u7#Z^eGJF4s|$!+|KLD)IK$zSC|2+>jlG~T7F|S
zsM3Hn@A>iL2cO9?ls|C&d<U5e*-w7YsIdHkmiHK|1eqgtzc<gFo;u(Lt^;Qc=F34F
zMhIU4)%ey7EPk=v$FQJpr-ocXk5Ll?Z}??T>ZhQq4Ci>k*Egx<9Po;eiJ{qrDJ>Mk
z`YjA_1Oic1MoIVQE&Af6Qvw3C6>dIdm=$<gue|{l@*h=RkRS+MWW(b&*QuxQ>lM-#
z$lSpCgLg`&%MVbu%4eBA-SA_=)CU<_W64PG^JXZAlo_l1FGiIi(UQ)g!0g{-SIYnq
zXH0|Ycv)ys30%+3qJ~3}?X|v^J&K<2fSVVzA$rYyOw9IXn(T4Evl0DjHUg)_GISop
zZae<KW!D+=?N{I2HaaSF6|M{;Ee6@fdC*0rp2^0IBr-HmaPZL^0EY-7GHT5|3v_lm
zN{u$ajn8+&{_dIi)*WCpH*J-OY9LEilQuQoI`hQ@osiug`-?w&9SArEjiUv@p+IHS
zzm>amPZP1%F`N1ESdYJW-EKZCn88W)lmNpOiUb#sXQ@?QHM;=^bhm#B+4wiuG2+S%
ziX&E+$<@mrZ@bObF9j-Rp#@#E3pTH*K^;bhS2=kVreavItkUe>L$-h68whUExrpjd
zkt)6c4-(Z^o&clwn3!kt66rIjh!B0J#_~2weCNk3H#Vojlm`Y`Pz?JF&tO2$Qvb41
z(54;-e-8~!C|g4kMoapu<rnd04ArZktcnjjW+iMoKdzFqs~ls{hckm-W%g6wPvk^D
z#5h3Ec0opc$RA}hR*7>Ei6xWp?n8b5r*f<y4#zxccvZ7^WuSsXs+BS5Dc`+=Ua;uG
z+^GPV^}(mjohDm~7DE9MkcE8%0&adC(zr7A4xsMx+?W>YAqU9$fMb5_`GOOUE9t#I
zl!3xn1e9*lIj9w>o;aggp(66=Wo2bAwfH=JDvUPp8CVR@`>b$O4SP#e42IsIae-+B
zIXZJWr3o;ow(i<h-)4s1W4JA?v{QXc0fs?hH36x+4<2MrDupShLTbcy4GpBRRc19#
zh0&&=#n}IpX-gD2i)n%-R4!hauj3;2q9AEbTt!!iDow(;K=5}_hP$=1yJz$pR7}@r
zL2sLyZ8JiTA#=BCe@&nW8o#AqdL+x}eA#vDmBaSWIV?<WK<mmVZ)XnG4yuSvz!SfZ
zh#}k(Jr|%&+e1scGgzWBHJ(lMJp==l%|AT_0%jYh;km|{_6^k1e-50>BlH|xV*q@*
z-)*YwucCK&2Str&!)XMn$9TW>F=*!FL;Y#>WKQpc7%OpS{1mG0yo6UVmC9KbeU&>?
zlnZ3D(>~%}P2r*Lzndv9A}2rirN8Z%>M?c~K{mjhDF#Es!&`y<{nB38b`PO;h2CbK
zmQFNh{oab7<it+dt&bneTug|%=J(0QFWQMzR8;<F0tj}|LdB}ZZ3YwVH0?5b_FN*3
z<<&dNePJu@MMsL~tE-O`gKNii_GK~kuUgZEyPfL@3p*#*U|C{T|KVBST@Vko!>a%a
za2s{5Lfw*I(SX_%{CMNIX_OuYc*4JTa7B6!6Ly!8#ute(GfKO-xV%|k`=S5&xT02-
zY7#&pg^yIJ6NM9klEIv!U?uDl%7SVU)_b?W|9@IRm2pjcB#hf2_xbaKBUq2{8Lv^8
z{apV?KkK0|%NHS?Vt_qZTb3XRk(3NMJ{o5E<=)b#D*c=h^eZ7}r})g#!o9oH?&L(G
zV!wD+GThd$LaHR?W-<;ImHC8y1`+4_X}BD5-r{FaA`35Xn#Anw#wyf$wlS|>9bcV^
zSZCol8x#?dMx6gcBq??IdiBST_wwoUMTCVPA%rBNtCPViVYy&BJluH9qGsaFsBw?g
zkcw2G397n-?COz3?MY$S$8(+J^=+}&6p9zVUjtjqw_?|5W|mitx{1o67L#Xa8i-d7
z{22JyYX5^$Mi!Q4+=D30L<~B!^`wTB8oP4N;E;|_n&2jz=l7nqq0ZHB84*wOSzn!S
z*tKt_EBopVpb!4NJg^_Wpg7RqPX8d1g|^zi617W9nwkSf#SPzdIXOAcSWQd5fkC*@
z7`xeW{UH(4U-$E3EaJFuH*ey>t$QlmId8ZeM(@Vh&}&I7e_uTREU}M4IR*erK)awy
zhNcTvu*ZHWUS>R1V{cP=J>K!8)SUvO2*$MbkIv+RkwBH3EODP%i+^SA-S-eZcJlle
zn}+dTsPKO+^sVd8o3Is4MuXWNg%~`Hq-&8UGG&*~ubG95yU~?92DKft+YFdOFJLsQ
zI6M3-4!5X~<IU%HV%;6PKv3L}bGK2JOSfd;%sBH^9GxZDE62Wi<;q%mg-@sUmSm_!
zDa=+9R#t2a&2RD>|C)b@2Na{<!*>I_HJ()DC%5RgKnT(jC#eLSxn`iC7k=dWoo8a-
z1-(8_i!w+q{!0wRBro!J*31;V?M*bZtlURC*6T*D&|6QAJM5Tg`m4J)%!+R=yf5&V
z4V5f%@Sy4oZJRgWKRm05y}d=Dx<02@dgQx@&E4t#&}?XI_IAA#rS&ua*?zT6+05u^
zjch<r?c%`rhvkJrqtVQtejwFePg5=awYEHQzSjSo&0NZ0?V>m>-vd}@6&|W|M0i`t
z%e4}Hhy{LQl^RuEG`jOMps&5b>^KoiMml5bFX4Mq^qR&MFhkGLsp~8?KO`^aX#_VI
zxWg9WfAMIne!vU41^&u$SmAS^$FyRnxVV18R9{;9dkGvMWj;2gRP92Z{9`8L6LiwA
z8Ar|bTE73;ox>K9#*$G4aw-l}@2>*H`@*pTxNj4x6}0<z70jsQW@c~1V8bL&pxA!Z
zB-Y!{zwN?HHT%U_oR)!XT7NVcOmcB|t6wP5R$h<_yDxa95+}O(jd>E7vufWD?^;}3
zyq(!km17*1gf}iw->!SMKIFK->Mw^E0j+W<5D*~DhFC$eQElL#5$bwFq081P(`cox
z-Q&jk*s`^{lXcbR!)T(Ol|WNmk4fGNf<{s{wmJ+9^G}RKipLJzRTH$$UkTT1_qZOI
z2N$M95jXFH{14ONQIZNEAuvB|W@g481nBeQ`EpE5b!U)B;v-7o{0@s@?fExEYwxcn
z*@GB^8O0uS3}HHP;{Dt@+SuzyC~K>#AXnr@0(=ftIwj=|A}znVu1?O_`1O4=Gk-rb
zF*sy7tktvxb2&&-t*!%1K{#myisK&|s$^Uf`0`~6hChsgB_&efwV%-j<24xBd!G4}
zhp(?X4*W%YB8okGqF%n_5|{3cLAnnZ{qPw`oPI~9zpQKscF|lzENe!#2rCJi*bZRJ
zeBAaKaLBZk6@Fk$Qm{ccT_|64VTM})alT?}Yez~-O2i44#`1RFF10VN@ZQUI92a!M
zZP(b&s#<r-Q^~W8^ZPwSK^T!i`F^9+zKCSwM*n9SY8U}DBki*#>?tR{5Y;l2nq2SP
zx{vYki6eo^T)Y^~vY*_jJO3(ixklUB%aVH!9r}HNM~+-aOH<v@&_ujO98>+-OchC=
zuoo_AX=zJyW5np|^7yenijUic7O6bO-M5U|5@D~S-^wBitS9jO_e7Ku#0x^qdM%p~
zfJ-#!;hQ1L#%Gd6VP@C_WJ6riC<X_N5mpLtqG~~5Haie#Ry}aS5w-+ET2+z*qoeUD
zDf@``^1X+{>$#~mGLCSZXvfb-cpj4#tSb3If}e;QQe46?5;`5mGiNTL-tWvDu!Imj
zQC7=|O7_cT_!l&%D7u4izvdaA(gw&x+_o{FFPLXcum>(8anoJKg_6XC)-=Iz{CI+h
z+guWKWcc<Mett2jO6#9sV3=by6L5btB`TUIGbTFR`A>A_bbV7lITRsh`LmrBxQ)mn
z%IOy`nm?VcQEJjG9rx_G;bOOlg#+^V01^XKD$R-jvj)qz;Dw}|I?^nUXnphcZSoTg
zJihP0N7aSq-Nh(F9CXY1-s!2S>!5SBV4wzT;t!e`#DtDK<A>r!!ML>VwPh>Ieh)aT
zw8UPc!U55TOUG@5eTeGRV&)D^zpky?Z6z>%BW&7wuwh*asgCP~V(Lw9lP~3`CrDzf
zK@Z5Hji;mAKh{%tnTE%(8JSjm)l(h3^zA!$a=*Y92ywhBanTzHjK{un5{~l`Hsv4q
zs)J*MuSi+ncVvWwBxOko@IwhQ7VlgMgrS+aIcU$i`p3qM7-1Bl5HCg5lJF)U3uBQ|
ze7aVZu7;&!om1AqbN62*+T!X);GA;);LGhhb~I0vnml{2$?+mhrSK+Ny=W(7$bw_o
zQ_4s-ZEaeDlQHVSCdljWu<*_8O`rGq#KSK<Fw7bC;#KAK$6A9X>ygCxgu}SAPx5yV
zu4c**<G|l9am|c}GQW3`5(vh=5e_$j{c`#Pc}NC>oI8mXlpHfR2c>+|M}T)F2Jj|v
z>F`H`Sk=Dz1=IYFk229{v4i;5{a!7Phl&mS{;^5?)7JWNP;9l+viCi|#(EtFc9f6r
zPr<%FxEhO=fAy}f1y*ms_pTY+gfsv1S#Y!Vl9TUsA^ryfp<BB%dl_!=+RP54sln58
zb4eVtrf>!^YEOSV-n+88I*S!0c*%@zXWn^Ae2ySwe8$A?K^=EnyO$cRfVKSkA~{=h
zc>#}+EVoYWUAe__7qT4V9zJGb*eA#gJZqCPQ?cxs&AgrJ$_YAP@ocLE^A?9LL^h(S
zuiWCVALI#<k&fF*@a=01c*?}T_g`O*;x9r&ldrKJ(6(0OJ%0QWTk$VhuOyG;*Kclv
zS7^Rqi4b;zfgu4d9x&W~mY0{;(}07fV*Nv#nT6%f7H5(0@NjEvk&>i60ps8+3M%H@
zlz)CnQa0v^cPl*)#7*OxMsX9PoMd$HXU(a3QXKw(X4NK2mRWy)_lu4H{n2EOifzYR
zgfG)H<eCv|u;KB?RO|xS9o%trcnQ)_88Gwm&YRQ?VX4(8M6vdaugzu+Lh<S8>>?dV
zUfi%Jq@<vb5hnf^NBu`d;UQzt1blveqBN))3tX67TwP^_8U1{O);>HiKKF1kl0hQh
z_4gC4-bPCx-mgDjjC-CEqbt6~=c`Yp>7(U}o4!o9sOy#F2Blx3WN2;(*U%}-{rdw(
z3W<|=A38m2tW#-^`YI0+s_RZ#edbaWd)YSg#(y81k#Czbnh6OMuDma-Y-~nx3}Wxg
z=%en<LRi|NE$XcEf=3m5F9>BEY)QX=`S1U`@C;&jy$`-o+sVjI-?R_<{c#C|1cFwj
zr+;1^M_plL<Y2Kp5$++D71Q(cZJ_jVV@{7YK_1o-+qZ6&(a?w@+FAqTxQns`fjjVv
z{W2}i<fE{ytR47Q;MFFKr&zL+aB%+o2KlS~vt`d#R<iWJ6uIyVoQ}I6nT@q}q{ZOy
zxpICdhK&o0F&i)Z=aX)RaxEIZ^29IZJ#2$(11K^PnRCI|mDG0BBChWx$n-sH+jtq*
za^u#mE255e#FsdMfkpn$+e7@0|MfL~d5h!!`tyJPOrG%Hhw0xx{?9)|l6=~5_&@*p
zKmLi*aTnqL`Y93!4+y{C!T<4>fB(@1(#Ze5AOGXqm<j)V%>KtW$ZSCG_CNmo-#>EP
ze&PR{Td~{45Ml8!;p!#f|NF!F|IclCc>SLg<9_@Ew=761M(b=QaIx_}Za3f4CQoeg
zaOx>Vez)1knL5ODM*Na7+e1U*=q~#2qd9)nkD+HIz>RBYv`N?Tc%rbgE7pzZCOr84
z?T*Y&?SG!~g*vg{`;+m*29IKCF=fL=Y$N&omGH#v%+NJ){a080jAOt5IhjcW&EIQ^
z2?TDMsUv@WR)`0Fmi(@N&%b_tiQSeP!y+L^uU_?H9<coLHz%q7-~J}uztN^_5uHRb
zT2|yIp=!G?cFVhnH^Hz8_8HA{V+}Gt{(Q0<n==0S-Chg-T!$!b3bVJ%KWR}vcZUAu
zmCu&Fc4Gl<XP%=KyUF}}TQVVX`;p(<nQ_;$_Wa)Dj0jNhWaowp15?r43CdSc1<~0r
zsJUhiML68XXi8p+dvJ6#xvcDP*RMpm4pjH%3yY497tpzM#DQuQhcPR21}kct>rztQ
zSQusmWR~XSsQW2~gVl5ozrNnCvYF6QCCS^97!-7?>lZ##Dx49&Io+;mZ$C@AWs3nW
zS6)U&W-LGm>Cm!wHPVO=geG)qI|lk+Cf-{f?XeV!1blV%dCTpDU@o;r*z=wBy%uHE
zwd<gut*4Ro#Fqz%i|Yy0gqHfbF^9YOfv6gvR68o|pk|i<gE33eq-(D5i}mOY=C}~D
zojd)YwLP8~8F}HP)FI0SMUVH<>FK5wb_=*Z`J;qL3HPcov-|gd4aYRGC7A!3o4W}Q
z2bBNPsHqbJMnSQ8m}A({$+OxdO?Jj%t@~hJ>0Tjb`gfcg=8y6`uHH*Wcf?_x@cVX2
z^^ti)g3rv%EC!J&l0h>NqzC;UG-%J=&#z7iJq|SB61rff7HiSVRR^oVTc{T3t!!ve
zyMDdV-81C`>ONE@moTCJ1V-4Y?0T@qQE1q`uR2*>Ri$JzA9qT?E)dK2lHRWn&sroO
z-U`cOmc!-pD)-&6ifTW2puIfBcRorl&2_PLI1*&)o(ahd_zFGPwJ0*+ymF+>4o}~4
z4?<)9*O$Fhp~n{&7G#)Oy4y1pl0-dj=KlEgOT~Jw!{NM<{1(#H7LBiXf+|0RLtsQQ
z(rIwAYpx0n#nODKZqW18)s+>=Wm8eMjgBM7;H7F>zjgce0`=B9YyiW9b-XCjKzbGS
z_Osn)(l-k0uL%eg@96r_&>)SaDBPJF%RYT#UtC)1jN7;O`Bv*d*(oXS(KeF{v4n(N
z)M{d%%VyTdUqnE_U%}0FG<v_kY#s6VV7Ts@86UAGG}c?%Fh10kt(TUem6k3^ML{wA
z#l|G|=mvteEWfcslz`<(M^?nrJUt6~i>sdl>Oy}l(Xh!^*p!)8Sm<}3jTK{<{O36y
z!*e7O6GT`)qCxmIlH5?RvbwOaX(u(iJYH<Wd8r{RylVmr=ZxieV0HcL{Q95e6~`X*
z+L4C_=+(cJp2gWv376K_KQF>B`W#d>)i|lWWAH?dvBtR?9;PmIXsG6kQnOb~p|=kj
z$`uwA5D?(DU7*g<Yx?rd&JHyLYV>3uLF>y~cKu9~ogtQIj%3@Wj^ytv5TObmd2ybC
z&e*mJ>QB#|TM1NzX}6>ryTgkjd+}6V@KlTORLj(e`K+1|@73%muZ+BWwtky;V}_O+
z+Lkt{Qa@kcgyG>^Sf6={pI_E&&^8J6yKJx&4r~&b->#Xx_DZAK-VM_20k3il6mBe8
zgM-k$yP0g;wi|7)1(?q~l&1{X;5aiXuB<H3k|?LZ!Ep~wH8+}SNv~9&@t!8bu=T4$
zV&7;4ZL^zpsV5&zZmF){Id_tf-q(FsvO#7~!W{U{2?+^zMMd8;b7lrWO`Zxc_1ucB
zj7<98y?ZGsDU(qzje@~(JKvO!Qc-g`GEak#jjch0WTK#9o>Kx{oS*nB+U<nr^#W#3
zyu9SX`0lxTr6zy+BvXv-t=zeS2x!*xbn3$_3<Y{<Sw|STxSVO@4j#4N6#3>b&tvz&
zp&^s%6HIjiO;7e{;VP)&BWBPny6vJ$M1--PDCP|t%zY7WkQQc`CsO`dT*`PnV1R7L
zj?dg}-3bdISP4<>-J1jhq(rl!*Vc;zy5^JWIt8q-3YL8Ep0cgFS19t`m`a*z5jNr4
zV@xNHwPVKqK|;i6u6*|i`L~P0<1+6LTW%%DgnyvtJnAr9F0!`Ual{dcWyJ+mQKaYQ
z9n?t{V|*QPTwL>k?Hl0AW=ZXI7^<82jb%iMx$u6E_dG^9x8cbvbbiIwht6(i6S4n?
zdG;wg0ZpyZkZL^m#CtV_|HIZ_hef%DUBfttVt}9`B5lwTQqmwGB`J*vDBazuB8-ZF
zlyo-;NH-&bgdp88Al=<H^E+oh@ALcK?>N5w&px)gapu0S>x{M5xz3-(y0)>FcTsGQ
zR<(mS+*4nq8>{JPYx4_TgHMweNoiO2_i?>>uXnaworQ(ZV7*tI%?UsyblWv4My)}F
z{Z>Q#G;8<aJQWwaD2!h!lf-=*4*NZ_pnaKqqSqfm{qUhx`}lYQ7YHULFL2=CRHb~m
z%bC?Vm1w_DN6)9|aJ&ocOU=%oPo9|bSeOpU)E$1rR#23dj`5w8(bld4U{7PC19;E;
z+Ko8<ye=|H2?>|Q#Qwdx2q0}sqolKy^qgV2T-1pdz=WzG$1?3kr>HJs0ZRA=?2ZT)
z{Ax*@w>!_!UvC~`)AiGNZ1egy4^+QNfy<CznfdsJH_YI=4VGDOOOA%q2jw+;ju1GX
zpR6kL+LGh^1US})H>yCdwq&f}^1}t}5B5_wGz>pG$0IZey5qCBwM%ATP1Ps_X$sJo
z42Up4X2CU=g^B5LB(x=#vn^A3sG1uHJRF=5=Zy(PfKE92-C*`>;m0l#&bLK(lCz1K
z+4%V>tYXiss`9keEoy6f3E+9#RFbl+>_^+WZP%uM3G*g9b3$vbXf18+oX*bkKW!ss
ze3!A<#h=L9`So=*_EkQ^X6;(Pj;^jDfLjUy9^$9^S+17NZaK<T-nZ~S4@IRvObE7$
zd4-8#%O!PoY{j9X0o@og1H+KY!E9)VjGpCGL&W|2qn71>tI=y1>X~+V%kfRv=fmhz
z0U*k-_Tw2i{};gt!YMpKpH_bk%FmvgyAA!G<?7Jimp|V2UVl-#eGg92z%!Bl6Y?zZ
zmz{CW*gIGc3O%Y1e|{0?=O>uj5RWzx6^E`!(Dy8+;oLQ(E9q~xVIK3049?p)cDVm=
zSK**)T3b_tZMzf<ewxH-nVZM-^?AnsIb4$)j<;*b0q%C}&&(`|bJKOTx!GMUgbRR<
z6k=!!k?rOtTb<!gBzEBlgiLM&$&DNLAP--{$7g<05ps)!GEXu7ATufSk*eBwu2Leu
z+VRY9v6cKHQQkV)p<*MmU<#M&X(u!q7h+NskQlSbaw;tYk@kV=H-Klt6B*@U()0Fy
z&!7-vyix|{iPP9Xm)S{+Js>zKSr6d~;~YMO`zwKly6ow`1QeuiSypF)f<FyZS67df
zm_#&nyR8oOKdy(JOtlXKv;tw*v&iw>LtbC(u>-cqbN6p_-nplCL4dVF<Se=w?=Fsp
z+UY^!K&Ct~Hp0%IC*=&Xm>91O!m%wg{H@ADne(Quu5PeOt|ZmEJzR=NEID$Zt?T2|
zZmuj2P6FUWQ~O&@hnlDR_iQCZaB_s3164Et<AV;EmZkDIxMt2#t<@d+;$ct&nJm>Q
zh4=NlEeDV#4Z$XEqa!6ST#pLxdj%3ereT-$L94fLB5dN>Sy_2pB+R;j7|YejSFf~#
zO;p6ecR5?s8%+PQ_-y}X%-S*O@C}QOt^~@%h6x4;;$elRRida*o<c|Ok2gkx`DAuX
z*cAGO{O}PYW9!~Aw#?XR_gkUGxKF4gL$&nzQ*JuAB3(=TFI1|NH6w7U2;gqxs1xoW
z*jWeg-hP&bvKLK5paC`PAHLH?-FnY}rtUz53=<2>m`aNz1@^_*C&SeOZj2$AoLk?)
zVIK2UI$T&dqpGTgg4?u?L8(qIEUY}oJq3TcCpBW)#5{j652V%n|AkS)evo4Hg*`-I
zA13@LfA~==z3F_#_g{U*K6Se4+*DSuTm)?XL+&o}0l>F|uzJ9fWpmK#X*IhpJiWo9
zsi%^o2?EKQxhGZ=Rk_PjtLLZOdySX5seQqIhqm1NxX*AAhuCF(EWNX%H$#qFZFFsv
zc4R%Fs10y(Y^KiIfiy!Z>WBRZIV&HDaqamW5!nAoS(&Nl!eOGtcE<LUz}5rkpaAPo
zGtssHU(PQsnlYVDBQ~jg8@vwn1D9cP%?4Ey5RC1j8kfZ9RfE)V-?ErAe=N4_%diMI
z*M~Bf7Xk_kO^)fz%nI}U)ORogA%Bi4)axhg_dDCJ-Pzq;^Bo!=A9q#)+Cm1~lJQ<F
zX4F+wxwNMIG=QAb@H>=+`frdj)>lY#T~?p$Fnx;!&x30wX35Sc^)NvENJwa0MH8|i
z{L^7G3XgyEhc&pNnZw>PjXboV>zX0U=|X(Bd|iw0d3p82rhx%h6aA3pX8gcq*!Ltv
z?Y&pDUe%?3hgvWD*Z)L)4Qgn{3b6?kNB#DWh&8V`=?^hn()Wjda8kUnU8UtMz|{7a
zxn%+5SCf^^fjMiSAM&w*7+QzFiKm&^y$Xl5pr=%=_q<xMEFBzo7fnO1qf5d#Ik$Hh
z#CZ8|l}{V+=D#Wj$BVS9U=&xetY43R_m=cx*SQ3|^(g0!>1Qur8o=v%K0SSNXMaBm
z=r(wN<wmVf&W~mf0dd#J6NFz^gPtxbCMM(KN7+jkFG4V962p8iDJ^y0Te`_+fDQt2
z|8m*3p!JA3aJi_8E&{Ty;fZR4syZr2$k+cnkHtnZ)V^S#trWN%^(cB2J(bz<+j6X|
z+UDeNif<YEHv5y)*;WIqrMHi{osbPDe~v#cW4lT3GlNsu6`K!7t|&YsC+F^Ua$!}P
zZ%+GR0Lw#FUq5lM4!~Z#bRL$d(6u|~t*NX1);K<{i>f`;taYWnO+mqKx9L<#=HcP-
zr*opnq~ng&{2weXS*EKDAG9Ajv*%~j(6f|7QIeaxPD-LC18c-fv{`|u>BqJ{|DI;K
zZcJpsawHu<*)#P+V`2nXMv8;NBh+qFQ9Xb?8~}DE3Pu$G?q-QW6Jj3;7uUfz&&kHd
zM$qEqzbup0aCiRzyz1Qabn35P5>N)H0Npb1nH0GMM0sXh5dwi=ugS@W^<()TKfb(1
zM1=KL0?^B4MZE&prYu-<Y2KT5iHO#5jD%cA9{buA6cW}aX5a_H9Z3|9&BVLRRc=3B
zr<!cAW--d80e?q@B0%YV_Gb)?d}>Ad=isev1DWLyQ1766`U6(7@b{a8>zm053PKBf
zrTjP^IRLR!Y`nk@?IlFm{;tIFeemvFf^`+_34A`hu4|+~OGMF83%frx@D*6?o^6tW
z5x5u6pUXpbZf|YXf=$Au*qRv1E2YUv(Td{_0pvpRaETL{+x_6iKuSrMUo|h*2KZSE
z<i~>*)ZIyJJ#auGp<NBS^LMzx$7{{Ek|lu;>K&I+6D`UGU|BC`S&45ujlaW-jpH_}
zSl{gJEr!}7XJsf@OGV`?B;k@$WvrrLtj4AE4qKeT%4=&VO8WXva!ophu3fwK?YCjr
zprr<6MHqofP4<16B8EQFQ=Px;iE=?Rk4d9yGIM=SgKpE%SO{UrP`c+k9if4{emdH$
zcYq6)0z~>nz2`Q(k!W~TJG<TRv>v{!_sqP*fflc>76{MiN~~q3&&+IcdTuhHCWrl8
z*t=yppzZ66u9y<>IVpQ$bE1g-eo*3KCX)Z4h1%Qy4x~0oJ(o4VCx*m<13Fd#mTPuH
z;5fC{N{fuH>K+q%0>|#s_#u=SeQ$9kNokYKg%%tgyOzKP`eeIxle%GVZhpR?tZWin
z_5iLi59^Dd`hi|uo1ENhe}6bRDi;j}=|Hg&S$_qLx(&jHh;l!_Kx}(@nb@>X`@(bh
z;!30^U$bN(m<~4hFv41)$l$kJRulX>p!nBPSO0S1!UZ}xKpuwQbt)9RDpv<5!HUy*
zIIUJkTbxRZBF;-pZ~@l0HlfD;td}pLxSaueYAq(~imuy~O*ggh*DV%k0r`DMn+A6n
zT42htKhO&d12Or0kb(6x_p6C|ux%(T01GDFPG-i%FCnyIh43S+&}VkeXGfff-H#tX
z4zN{D6u>BhF4fF(HmwuIlz;(TD|j?qk!&w{rluExRyF)s54Vv`*OY3zHf`2=<8!>a
zsZg08rV;4829#i#HtR~?ydjioI-ppB*rws@+W;3V@5>jTmp}gLQuF^n4!GQ<q|62Z
z|099wfP(8Ba%SCkm_&TCH4BB^CZP3-<}XSc=`-lSWER+fH(CxvRY=|~6;q-||4>={
z5w$a%h2Sly4n0j26gGE?m@UPuC#v+}z||L=tDGgcz#6x|ar^q2t?gZU-D)5lVB|Ib
zN+%}f2RMKJj~^<GN(nuU{;^|~9C~7yy0+!x0hCSh=a11Ea}DaMy6pGvJq3VG)zR_u
z^k_SXPs+@?ZGBGHsQ`OoZW8E`0X>tJrKK03GY}LvyBDt?|AD?8w0BF`Kr1k*0SyVD
z0t2oM29>r^>kW@tSzlozinn)~gk%#oM!8LTD2j?U1RfbdZ<@8Pa`w_21X%SLbUb^J
z+4|Uvl_|d*sAsK*XTY>-`Cp@g4eF%U_vlR$>PYtW>#x$GG>jZYNSaZYu83DM3jZ5d
z&Lg6Aa<bZ84pTdbsbV+c-4;rYv2VHVUtGZ-EKba?&_XoI;kr2lF1U%zPo5|>G&J~$
zp7Q5MFqQ({%EhLC)?~1+(SH1GLlC2`ewL$@SYz3r<qtJ7lc3;`D+iXM!d~ehGR*5*
z#_j$6K~gOR9&b$fa8l8pXWp8&sYfe$qKKHoZH$-;i>{CxIu#D20#?v;n2kP1FhRln
z{{8#;>FGDM-wO2WCo<jhYLjbIJZ0r9#I3JrD1n#=UN9TN5BAj6b#RbZ+KjiWYYKP$
zYqLWZ3`&u?@J={Av71zdk(`t9)sdp9d*DYwF+*!tx1H881s2ZWxcqYSUzKgHW`SzQ
zy0(Y`04BZ|AE!@KLJ%E5)|mkpigLpY5Gf#?)mG*|e&TEqfWgYyzC+NWy=DOrBX{c<
zIy9W88h`>1l2=R8KXl7Eb3{-%9GsOeowr6t-ofS$VBmm$blx%k2I~=WFA+5KkCq<n
z8pD#6d|Q+!7PWv2t*)(Y?sYl4ZW51$z-_KBBcn`Zu?uC>|9gtsyg#cR76YVW6Fxrv
zbHPJzm@blpf$<1P^*S?-S}ogJ<SrJ($C3w!mv;~>VtzTS0&n3h)A@ZoOT8wJzHuz6
z`nQYrxts-rTS079=IwKCJ$$&fW{pJ;fdT6crx!!73rY|E^fJLw@deQ5X>f0LHxAT1
zJp)&h;UBCH1|-hd;PhYPjr0vplvbq#=tt=4Gmoef23~k$%hNDPR+WnP6T&YG9o@ha
z2w0BLFl$i@zRC!D$iYj`=;iLt#Ka`ardy#2qD8$8_ipG$xBi8#^kvpU-azdW5QnNj
z90C2B#ax^G{+Lxayh7@%?vvwVN-W_E{-{eJM0Qw~dIj6Z)h-8h2_^ydHhQOuc?Wux
zar9J;ix6y}9m|@XSrJGyfC^es?k^Tlj<*wa8_NM@SJ4|UYk+gtF;}mCdTtwM7|-6_
zVgVvWm-GF~n1gkoIL98ZhnT?rj~-ZsZiCyq3y3CGVlp$kns0z?^gQ1u12k6)>J!5D
zF=*hKit&B|wx^iDuLIp*77{Q>7C}Mj-d;}VhRb1_ZQ&(?1<S_w9_$7FzYTloqhDna
zQL}TM!(w4c5dOm<c>#Yt2nXCUvp0tjv<)T%fl(QHwILKDo(ZVgKmGk`oSfJU`w@Vg
zwEwiu!%5r;cnQ2;0M|9SQj?5SlIozQ1-m~l;vOvnA5Fu{wlH5tA!1qgMvPg1xS^pO
zTW`RQK?$(4>j~mOYmJVYY~ILMj3)|oG6UQl#&5C!Jq7iJURKu?&|G6hGceqjnZYxR
z1v)ppiXH*%kvRq1Ob14aXRp6Q&n$LB_#Z6LRo1K3{|@+`;B{v?)u&HW0D|$EM87nE
zl0+UP-a|**!!Z>;FJ^p8P1zJ%3$~q719y?m?Cu+X@Pb={BU}bGhQ|e^_%W|&NJ$F-
z%LBSx8kRTJFLa&%x=mPcZBY?AlYU`;e@O-6v!LX0Xe|IC9o>OXf`!oFM<^n7oxORi
zM`S@IF$fL$YM+Cab5|n&wyEyh!?W{NK#1GhnZX>p7h6It#B=0wonoAZkF(9i8jcrg
zq0V@7`06H^mKKC%H4Iu3i`NSIe4LX7?7+5WnWz@|qKxBkQ%n{PbpLmqO^f{%Qn*eQ
z{Mj%Qme%~XRA@Dqj?7>}-v4sw4=)<xYu8k<@Sh|iXm7VWh{vqUTBjfr>3aF%#icPT
zI|%JQwSI@YyK4EGxuDw9fI{|V-H}Xoq8pSL^>uX`D)yRCf9Hd!IksVTlNO6Y=(&z+
zQ1IJVCHbCkN@kCP2_hIiM8|Jf`FML<A9lc5+=B`P>W+E#BClw6GOLjvFI>CJ!MJf}
zSI7+m+q)^(C+pRKIr((3p_n~=vC8|){$qtA?P7J{*0KDuZbPFy2S+fKM{a8WA-kUE
zRtmn!%o;k4X(4QaM+*C7b?xd6J#+bac)mA}D5GljpO-5D7?*`zr+hcu9q!v`{o?-a
zZhwYcB{O?rVN=D<&v%l50V;#Y1nDx@Hhn9aQB+hMl&o*~@E5SLy|A@q2#b_jplWy_
zuJEl-9v&`p|GdGm1y2VY-1plVH*3`SeqTl~J*RPST^E}IG+n_V=kw>%Y9U+I*!3O=
zHIy^lQZ6G^4kd*Rp5eI#bF;HXLF3?bAU)-WDPT68XEo&pTwF5y>hJMOfV~5?BMa>N
zFfct!`@;s#G5@?bCQBngl4~8WkMu1kqG}rm=9^sDN*YCN-_-)(TNbXB{fIA=d8N=_
zeh1;xK(s-Z>a%AV(`VtJLo>WkR6A=dF5XykFxKwc9R&}iB1Rc10#NZ~yR2$LcX6oq
z`83jPycM-w@_90Pt#ZCDGC6s3Z&a?=BM%!>fuICIlXSEnHz%juu)fgf?OF~&zJWZK
z!bu7~r6K5i{;M8G?mt&meMrxUDQCkf0!SZyvmE)+yE3+KC^U{T*xvp`ua6AE)B`iM
ziQF7>Ia|rMd(7HzaO(B-{d<Z$pfPKf(h5EI2NxBtet-8)9PH8qQd#LU1Nyb4!O4Fx
zMO;#H^q9JFEFx~K>qiI_!GTt8+jnj3?LVR}PJV8{f8{anl6Ar?h>>~rEJryR7YLCe
z(UT?WX#GxmGPguO7B1g`bQwDkzD;aYPr<c=`>z^wr=SeF*!tsz4ro`{_qkuV4Xc^7
za-nXTIq#j(fwXN{&n*ab<OieQs%qW!{M&!|3|1fv3fbwMgKc|(Yf+Qb;X5ot*czgT
zy}kleJl&HuQHM@s>cr5P0%^tqGLoL@r_aLID$c24V2D=%O!TYI2;Tr4nN?x!j~|S7
zz5MpY3r^TshfK8wf+exRSnri|i#~$G2p=CmO8)X&=nb+~2cQMj^A(4>Dk|&14$wLn
z#!_7|X>V^YE_VTeE)*62`VPUUK+y!Co$vp51#q)ka*jyDdE+a0ND|U@^;_0`N$I$x
zX|j37y$umi!uag(bYQSeoQ)ss=Ip=Dr%>$T?1mP-Lr$IxOVqK^S^nEu1_v@hBQ>$G
z>d|5*03fc(*}s1e4!R7Z4D*80&L2bezIBTt$7ylHb3V!}v0+s^tku9|$Yk3iOw9Nh
zT4nGLEsH$SYY7S9aps7tNslEpiZ5yz{jU}vJ?Xh%bcEPk!&xdA3G4Zt--g0;L~j%5
z4rm!!;HP8T0+`ZFfkK7%dSA#&02T&0)6Tho!`qk{t)C0@w17`zdCpA-ASdzwD%Nn-
z13(1wKpa$>i>ii>-AO*!w+2Oz>q+&aqB<oA6+gyv%36nqwIUd&3L_&IvXIb>jo9iz
zYG3cG6LR4SttkUgLFod44`Dx~sK?GX${l6}o2I~}$~xV76oRgNt@!5|@#0<hym1w+
zQ02LtqG2c@htf92FmE$}U~&BVkEm>HKIs<0{5ZW;TOWu4*;2W#a+kZiyLsDJdFKu`
zx6$>pZZzjiCe)bbGtKeOCz6c}SImI|bftaHe+x3G8;TdTj8<{}t`zfF4kFd`jsq#Y
z9}u@rZQ!NMw6?`?&aUGhtxs<0uu=%_-MUWB^=o+t^f){S;)iRWK7SsnKNQXQ@ng%;
z=A(?%Z}XLb%ZiDZ(Fh2kYT2SoeRW1gvpha0>8=J6PGy+PtcqcgLt$gSAB#sXXEMR<
zXz9-*#+thI4mE&FTu?52@$cOZGBWpv2DPSMvlMkLDk>`n)z$krw^H|Gf&Evo;Vw(b
zM<q3te$!5`_MitMm#OF7H(0u1qt2-Y-pr$U{YJgTWT)XI{F=i_zZ&OPU^u>1F~0Fa
zU0oq}2q+wen#~4;-pO^?Wr0mIfaR;@7IJPBW`}omXz6<-q7WPh&Z|R`kdt&*rY!pC
zr24bP7F1;zqz->U)+-%A0#uj}Lglgbv!W_EN}%WGfg<SKgLYUKp5cp`ic)RXn!Ub9
zgN1snxBQx>rVRK{&e;I%>dl<{g`Mn^xU3eattWNkjA&(tY`<CxLGbidE9r@z?@4AO
zuU9=_$O?gP*^_yS-ByQ%o(m&SJ+wAG@Ge~7by@LeM@7Sgu?0NqsDz2m<;ApgBbVL3
zZi3V}=~YnQ!w)|kDaa4J9<gqX(2ib2Wd#?nFRbC(7#p)mW_yJ1-bA9P&GK`q<TT6?
zo*o{|yyc07wHph!#-9T<umTbgcBJ=v0-JJKlvB4Pkr1YoZxj1DHfm|VCMP31I%x0S
z{SI`~MxRKj5cHdq*?<$Uxkk9HSL$(K%b%LEWKH!11wp=FXRt>8mG5XHRDM9V42m3{
zK?T?t)py{aRrkH*fZl7B&vJl2Iw=umLzd#KY<UvnscmXgC1osj=Em0<HpfWr+{tp7
zWdN(E-c0Mz6N|ki2Uj7C6Q6;B7|LbXxwgGFWbD`PA`L(jSU9@*1-+hs-gSlax}8-L
z{w-CGWOk~*-%V@T>Z!f`kB#cZ`|v*;ge-!#ZS3oaM%V<oSMJB7Fo3%X>s?Dwb9!D_
zepP6*&H#;mr@<v{qAb<S^@ycwX??u_u5q03F;Vmk2K1rWmg}@s@y2(r4UeA8ReMk}
zZ#10ZMt{pqOR5DXviQDwSz5GbH}q+m(MY7-6ivU6zP0tllztZY2U2dJu*{@x_U?T9
zB(EPzaM+-#gzv68lv^ETtlXv(MNslff{!I4OBvZee<JAjFJQOQN~-%m>LibAMl#2?
zjrxIG8;#onQ53f0g2ivSsgfKH%jc~iz$s58CLxJ%9=AChS>GzGg6TCt(yds`4GLls
zqIXxp8ATlCC|z>dA+&;5h|C(%$cx@q1C3ny9mLwE)*Nx7n#L~Tc?6#JWE<@RzqZ81
z<TRt?v->-U&ln|*4qA{+XP<5+zp306lNpW>^})wpFE+JF;g8orS!91d4eu!qSsm>7
z$pJ<<umnKI>~vp38sWYHbNeBGPY)K0i%?(9@Hj8g2XX;_0Dl0HZo){<+jq1b;=c>2
zL-E}W_;tXamw+A^0^}eK>^L%@-;ce(KHH*abPa!Vq!_hF2{aLr%uS9$_s}V%-RSpH
zv-Qxd+0|96yTy{>;L&az0~Jp2vKKRR2%Z=qUhCgrTyt#N?K6grkFRn<deI@n7Uhm|
zpIy&-{S(-&Z{r_TL%{ml0%9fAlR^-+L?$NM)GhzecJ5cK1p1|8eyZB^SMbWD$lvKH
z_-!g0Zm=vJ{BSjb%9oFY<)zz%Lo$rzuAxN$rEc2&0PPP{hb)3)+fA(?@*cLm9E&wZ
z$F6sPrC^{`8E~HP^zyQRHF-p|-p#Fy=FkNy&V!)5_gBE~-l!R^Rpa~3$k^(sy;vAU
zW@hj5wO@b<q9^suSRwHvEp{;e^T`r$5(S%!M+y&Fj!sSlMUau$Gf{|~6yA9TpktHM
zD?srD-8L4S8vwejIY02CcCCZ|e`xv)%4z4t#KYPF@mIZqu!Lq(?#J}R@ftv`^S;4g
zKvH@--c{%UQw0D`FTNMBd&!za!MnnxHY4tf)|p=%C#La$Y%`G4k=RxFrl|$0%E%^U
zGKja$y6#q5n49OY*RJJVLmoN|A1_XDZZ4LQz|7#Q+C@xzgq@qmv5${WqP`Kp`A{z3
z?B52d5Px*28q`a2aH5xglnTQs0J%)oc{w1dSjeRV*$b5~gHnR^m?rRlg0K*}!g>+_
zzdptEi06yp4r?xt*V<CVA1V-2LPn+v`307npf*6{z>Dt314YHkUIH($1=++BK-K^O
z^zgZ?EbIQUet2QcieNNN!-cP(lOIfMe{Jcl(-RiK4Lq&KrrgTJ=_MK=@aBR9Fs|Y{
z)9jEv9JZs{C+m8rqZ*g>bER3L-Xe7Lh4ly0h))F2htwP|2q_L@uwtL%MJbp#*8xG1
z06@e+C~b|GFU8cV>!ZI77rLyQY|hP@W@QusBRy$ho$p@vGm2~%ipBi4{{po1vw<h&
zUe9Z?<rQtLo*N1!BaujK3cPu9;hgu;>IYD~=TQq)#I9^j>^wUg-8TFozd8&}h?KOT
z(hS=e@dRn8!|$cu*}<F_B-!hTnZ;m`+Q&;*xV4}hN}!#vn5eo+6#5C?3c}_9AW)Rg
zAs!KOwW}gjXvQR}nuBz>!bZkr%{?r4GJzTi6RT{T0yc0zU_B@?;`Do|6W9unSpmDt
zUL>iYK%FhO2vRpecY8nbE+2Y>O|ZzZ6O4|!?N{Pf$eyGS9}_dT#RsZ~QN^)*jr@xK
zbyeZz%A<d@Ci5XyZ|M}{oa0eePkVj(AWSL@XLB00JmROzkl5rzQDZ}OFLYScE#iQw
zJ0ES`SL@_vWmSmQ_cV$6@<KzJwe-R47hK$T6k@(<7B_g!S|_%q(}DK~mpX>n!riVJ
zH?R<(pOjahb0WJz303rGQ#<<(=z$|GX?~CYqetOI8UK9yCa@|5xG0czXw$D2+3M}e
z3uU%fmuL+;IBb(voHaD~u8h0=$o1|{+Oy>RAC8f!8KF{tpyh~Yqb}*ztClngiyU|c
z2c=&{6L7AT+bd@_f-ohD6;i|9<rLv|Js?s7JP703*+)tmw(BSgJdU1UeKq^%id+%+
zka1ilc^$~<klCWV0eWm<n`mG+$n4h^MfG$C(MIb?2I?hg5dlf`SFc?J_=Tim6Wa9g
ze@(%ek)a{B8qgRG83ybShb5d$1LvOvj260$WBg8S5*PlSKEF(qKrn(``v+DI0JO*!
z<0lqDRhVLjJpZG404+!Cd+znIbKVC}O&5Gc_6O3HqUQ}To<lu3CtFRG>mje!6&Ab5
zD1CR+LnnKIGchiIX;Q3xn>IP+QBi`q<p*qW4;Z%~=oT!JEG$|Os(@+tMJS7=sbzl&
z9)g-bvp2mpUlM^F8i%1MNPIA9Vvu}zZjHr~p$FB5N<`3Up{(J|u|j?oHksI{{ai;#
zO@Y)23n06^1c}Fdhaac+0!&qc$dXt1Ois=s70d4>n$>$AkRZUdX2o70?hfT|6DYfF
zQAMl3hUwaJ@>xf7U^EQ8w?B=C<~RBy#;?b)zT!6k1SS!<jWcrZEzQ*-8>rXkfri^T
zB(^{1yG0TKn<h#jmxK3~%<^)rjd%?V`&a@KoYmzERNO#@+-E>jBP>L*JmO0P%#-?{
zk6XvemibIfOymTI!&E|P>Id_OaU{RCLM;R_yFST%=1qScOfy=oc&~NF_QwhAlCF;w
z7ij;ae+nrs9ZLJ_xM`0HV{)K19Ol{7uRn=@&ka+NwEd!o>y-w1CLQW}4gn4yf?lMv
z4|8`5zhJ#VVttL!4))#^)gRO`S8;hAoYu?|&6;!XuQKLA{98wz9+LD?@>&||BH_OK
z07E@i=aCL9HJWf`pck614A6}>9bzFokRv$UCB*7PYRAF+a%!+8c-01%9e4u3t6KIR
z|AOwOa>B9Fw6kg|ASD2C|7#L};P8Avvrh>7H&x)9eWMfE>k$duMEPL|0|L(XOU9MO
z*m@EKlB4p_s%jVtsbye>PmX5Y%DoPiKnV25usFwIHVfoVs|vUsph|qaMmBg{w+soL
zQV~lXLNU;{Gmm5vI?c#%qIP)YdpsCuRJh~~^VU|iGEBDE7lJJ)MoYzdARk&&TOJ)B
z=j&F|z?J>F{z@}!!UG+a0ba7>*YnUPtA^Oa1{#Y$t{Vz~7I(16--DhYTDs?Sl`nAQ
zJebz^NFN5;IH?x5x39)MeiIHDJ(i&uD^JgRCK6Q^n&jvA5|&fTfUSEt(6qJ$3y6RK
zEBF)@mvJ&jlUqXSf2qR^?lmA>8gh;1hYH3mJ7XRZE(St5oe#AUQRwL|sY?Y&(SQio
zI@uroUEu>(_7Wid30j_h1?~SpnZ@pImyiq$;@H6mmh-qkKJ=hi9q;tn`r=|XjmU}l
z^e+$BXp?_GQ(a{mVTvf}8|!hey^k`8u{$`DUyq212n)l&4&O?cOx7|mzC2kt|1R95
zJk>%B1LAQq7jakyP|W;7lKicY(9bo0;)}ht2EiZ)fFBiLsMcw`Rt9tllRb9Y7YX~Z
z2XK9&8Z}))NbdM4HT@K9JXNRE62$Jlhp34yM&J&P>9YbTs99+%GFWOx+wX?BPFVm-
z<O(l8^)m`6M5y|C-2fj3!EUC|W`b>%+tRq(+dJ%MLti7efL&u^FH8bD5rPW#V1Srv
zB-3TBx9M)ap#8mmTZPr43KgNIveN&jjj=$0kh-;^5UW19Oj~DCl?@nFKud6KOQg2|
z)D$pN?YG_qhTZat$=z)u*?g1kFMv_xaP@Ar`1OI3u+<KDT<MTHb%=kKpE?YL1)N|t
z)fg;n=i)wO22lXp!CZ*@mq)-{z&x;!nun`vg+6ejlB`*->rBDqP62G9nsunvFG91%
zkRT|8k8Y`XXbxS)zIRw;Y#P)7{hAfv{!qdszVQHI9MrzDu)Twkbm)Iuq0`}vunJ6(
zZlyFFxnAIDZ5Ff3${JSsTlpR9fRca>vbj=0Ye;SELciM6NvzKHH(9Ck*6S>r<WHde
zfiS=qycGX!NcZ$0(+X8HNM9(q?T+1fiPf`%+83+G9)eLqIyo=^EB48PiNczdyw&UD
zDM$PDbTD=X=v9S}AF!TStAz35TQ_c`z$N6N--7`wW@s89@>!cu@)fFqT83~j^X*%l
z+QbS$ij*b@X+Tm}oR%m$JAYqJI2pII>M)^oY~{VjoEye$`Y=)6(GMWM>v$iVe-HL+
zXz7{N;zyd&&F%c_8j+W34h4c{pxi1BW!2fifl<a9Jar$e@{N2;*!;uP6Lm8^?~Asn
zR10~xAHFN3eV_sr)=}}cwQlP`r}h(A!bgWCS5FeGV0~#my}WOk$YrAI*ZcQ}rwm_)
zzQaRUEcgA^n5ibfQ7^k8#DNcj1&ut91i1G-3kUoAk9K#On+G`O_r1^e7Xk1zkNPg=
z#eukkdQ=NK_a0Z}W$UC3`wf9!y8higkQHXdJkv<{Ph*AiBXlAa`Blhxu5co?L>B6^
zQ_RV}6|dU{S;aeE_)<J@_F&hs<&jcvgKilcmb!<83GV<odNAJHOsD6yZmfp*jD=?j
zIL=yaTJ@yn>k^8Vs=jv3D`OeYv6_9iai?|&I6NRUQj_rnG2lwi^aGH2SY=ZAX=Jju
zLxYx6vp`%Oj#uTpeCxmRfB<MQWYTj9^w-lJ#M#*ykNegYwPUEL_8^LkOj@yz$@KSm
zQf?rF4$|QT_rR5rY9hr^N$;g*e@kHm@a_J=coBu*fq>T&1FTNvQIW9Ki8q9!{Jj%a
z-Gh8ADzDq5AQ*kI)@qpOd<t{k#Ixd02WQ}q5?;sDp5wMvk%-;OSy3Bfa$P>Wo4bF)
zBmUO+acDnQhB^Oy(03PJrcGFJY^piRk%x}x39o&(R$Va+Tr<>OZ=b>KX?}KEKMk_P
z7#d61_40k*J|kx4;cM%WA44|dqJn~&YFQID*95@_?>WeWlg1D0VZ;JNG`%XO5KEmF
z9>obA5{%2Qg#+wd1hDbS6ej77+ukL!mSFBs$6b`0!RmZ8CL8P&D5RI#+D7uB#e6Py
z_L_*w!10sEvxIMKYS)P!GM%oTDhqG__y#*3Wkordn0nq{+J#wC;y7vX94KC4T+HHH
z;48;=lfV)zO$FMq(pnCzd<EFuggfjBc1&1qB!Xdq=*H|U31L4xOQ#WsF*qYI(|k=*
z2TO2wlWt~!u;AxL)5kQMleJRixIe(L>9C(_z4*xop@+uDxdz-LjaJV#UwH)5c&&+#
z`*%J7hT3&C-`uOU`L0Zupyyr={01&C$G?8)IXQNjFZa=dI8a96q1%VRKtaNAp%U}n
z3+J=6YS=tt2?+x$#mo&2D1lYn0ZHCFH?bkz^*ii`we0v7?0L3*S@B^lRQTP_8~GcH
zf1y}7KSU~HGfhPoCc`Ol0Q|X~UN%gesUSfr=elUJ*(eU3CVDry6-GTc0-ri5b&>x~
z7SrNDo{1sSo2v^P78iCy>n~r{%-5jx*$cr!UAjMOmxOo5?N;}iNr<CX0+?V4NG)>v
zWR+tD$V<M&XsoodxRs`-P){gdK_seK|1#n-k?~5e3~dj<)`Xupuqq+YxMqM4SmX*H
zBo^BhrhTZ5`mv;<=VMi8;_bGFhp}DPp}=%I=G%q)=ZEo9CAibcy+#0?$skmuhJtop
zUS6YuK9g13e4vSy1nHRxzZqz7y0Jr03dq447v0*98@Fzy0e>C$ZS^-9CLjL7n8Hmc
zae86A`t|d&9WW%rpqtE};{Ln@?q~imUwOF<eEf7T6#XYxf+5bY7G>&CUFbS0X{b9Z
zgUv0$bve<|QATXEz}9~KOz(iiRsjmmLO+;-d^|wvVfz@QtT#SK)4Ew+-)GYQ!1{^h
zUYYDwT1=G;v9Nt~k{{Ya*D#kGQcl(jLNX3?<Mg7MYFxZDx66~6N}*Y6QgXgrmi3-A
z*Rv86<cb02Bzrk&qjG9!89aHpP#t{cJw3J(idfG0&<l$t_@Q_GTn#=<A^nokn;3K|
z2vf57r7Q%sz{j>K$z#F56MdY$Hy>S!MXv)d3b{2Kz2Y=(yP{@j<9T8$axj9I)!YM0
zv=vzE)YmP>!7^x9#jV632bY7_#d-^LMXQ)mq0J+vl`{;|wVz<Q{^q?8H$FNu_eEvB
zXOxl>**sfG6x-hzC`ILFPky?`^5loxrAy*Zb5$itE$&BA^nqKAO9X0)mh+97D0eM)
zd)FF+hZrp}4Y4T~x6p2Etg?rX{;n^F0eWVWR-MObrD%T@*<zMl-#uUe`XZx^+;Ah>
z%snn$5qZPSqF(dnll`gJ>to$Qe`~3SLCHeoeLUa#-bjfPz&u}56fED}Ue2}>gx}pa
zeDMNTv&h$<+z#(2TjiPfQ2Ek+!4dkjXnV|x1B~-r_&s@wxsQ^=%gW0B)gMm&oUE_q
z-+V49iPvzp^N>o!vn>rxXPiaae@_u_c~?&ME`60R7{(i9<>t0qzLWZn!pHd~#}Afi
z@7$*J+Br8bJQWwG(JVYGN^#J!h#b-%=n1uLh&>MudD1daH$J&({i|Ed?iYlup99?o
zSub*PO~#&^3A=3&LS5q5*3mJ&rw5wyk6_XFb+jSf4mC6scsOMc0J0|gg?IV+`CAL|
z9V+V0^_#G4Jgwc&T3}P+#>G^83EY#_mAOkeb6&Po)YLW3?CZ2f!hiM%h^WV=(*G1y
zRJ=5$HRvu|x7_;YAIep88z-NBM*ZaIf8D^rW-$g)Cpkxbt0`_Wb)y7G4e!%+GpbD&
zCnu7j!gDI*xoZM^p6_{idEi;-_cg)$n_8ESPONrA!g(N_pl3>2cQ!>58K-m214uL%
zxVZZGcf&I?>5t|j24xkD_Xp$c(EfiX#k`p0cZkFMa`=uAtR6T~@6ROXXjRkDxNTz3
z(D!#o{QV$S3B}qW`uoCRV|-A;W}Hw`F9;cDIyl5k8>+#!mlf86ng4tapLoxL3Fn^p
z4WIWBjDDoItA(n(j~{#va!GL6*w}FO5-~B!94WI%T)L-IG(6ixJoV;T*mRT3&;C+c
zyPg*59S+t`zSC21kVr5oRv5?k7you6qt`r!*jqXAR(BGZ;a(6Evkfe0ZmxenzJn+4
z;puse=*sbf(q#k_MKHeq<<e1^4_vRoB$df=6X>7q5u<J{WOP!}XP4Cm_4(s?AvaNO
z2e3xJnUNi2;ACNORrK6Bcy202*h8?czB;XIxu5Ze+a`PIDTMH-n{_@u=lq+cn)$z}
z-6lFdK7r1Jh2_zsXQ6s(YW{=yQ^rG~<W3@H9xY!45<1PK({Dl}{4S-+?#~8FEIljG
z$}^dJQPZ|nG2f)5Z;KHWcB`TVnjONYfO#*l4i62*iA)6s;=`ts-9MvKmfbOpuYW?U
z4Q^?XZbVj=mtUp$Cn@o3q^nRfh+cl<&BkFIuburfmsHP#CgM?RQ%443BHGDNfUC6Y
z4u`VR(k`qH`>|1Y7iMMQBhjAEekiRg?k|j$C&$}#1FqFvmJVRZ`*C*dpGsYrt)`c^
zNl8D_VE#nOk5un6YHZer?-S#6CJ5->J6f|S75Bv+>+RNjdV{9DWj;=%!@-&btc7N;
z3DqxZHA^md^T9_qDq<A3O7juF!xkiK`wNX*0`~vNj7{~w?NP$kZv{P<X^Ft!Yp;TX
zgMndZGt+ze^qx`6O{3MJ>uEOO@MXIabuVFtCMLeXgH<o<ssXJwiEvM=%*c^Fz^I%)
zk=H33I4Kog7TGn*(AIav5JL}0qomZu^Yy`%_e)Y`p?I1O3@gX$gWuRFFP;?MclA=7
z^4`rI6}7;g3z~_h@5ue3fKEZ*x3-CeKiBNCGwHd{EuiZT<1`lOABr>T%g9Z5f_nWp
z=I<ZSb+S%YlePDyf6pz=&5R!z=O0id*VNFsHYwR}-AX;-GVD|5Yl#Qi&&iq7^Z966
z2VaBq-q&Mgl=O*6{i)BDQ~K;<$r{f?i$6p}aFZzXy?*>JLRmAOw;A@8G2FgACr^{k
zlp6th4I|)P5?rF9NU`_OG#R^8{`KL;dgsZ94>$9IeIk20toK=U1kthFj8d2+m_^vx
zaZHk?6Q+eB|Ngs*e9X&)pfP)WK;^oAa#gGF)k0JvEhyhvj|Cf!X7Cb3yq@n@xT9(~
zIwzYFg(|sbQ7}I%Eo5OmXS#Zadn=CO=dpO%2OfT$k3q9>7cy4}D$McH($ZoZv=kM2
zce~>HAi6=Md#Y)WUdyD1$w{Tf{rTalTFlhZOc3$k3QjV1<0}k?C5*v&c)Vo_x=Ua7
z_xF!BYKxvtRTGf)z0jbaAe$^U$~S*Nn%?_yeVmWr3qs=3DRD)d+x;u=RR~f=E2{;S
zs=5{qhL2vpQ@5>mxu2bkO5$I|t7RAKKj<wBj+T@ssPtQ0`)-Z%l#$U)_+%;KW3b8T
zAe6Sv&=0Tuzape|V4dXfz0DhBR$ho2Ntkw3O1g~+v0dycNLxH!&dz_KtNX~47&M?Q
zI@!JE|28&K+e&i-7o`aO8{ZO(x_7Kitb|bO#u%pqMs}Ci^1I@sm~J%vF=FgKMy30J
zSZ4=^<?1n_O)TTtxg`4j4smP~&6y;~AK=eY?G}P>X|`#R$is)ELax>(Cz++DC<%W}
zZ~{zImc+UrF720<m&3Amzp^S6`n)z4w<JH`N16~bjVQlUX<;)s3ws<dT#)taa+H@R
zC{?sxQz>noZ1CX*yM^2?zek#N=25E@Pguq8t@inH<ITpq`=8(&o0wd)jgO0C-SV==
zC-ucA^c`aKtq3}RnjpWX=4JlWA(ZdJ2P35lE%9)){(+`RbNzS~OdGj#F!N*`vG*OF
zN~HpDMbG3&;0=MsRCdg*mB_U=Cgy%325Rg#B~8f!yYWlU3YmZZmQuj?&tbClc;!aT
z)qq_3UoF5PxtyFp>&HXGnJWfWAHRHgk7(t6G4=ZK<1~d=6ZWO8e>>|sJq*Arjq$FN
z2$E)NXQ$-u#r=ZHZ%!e#zUO?JUM;ss4js8(Uv-$4z<+4Hi#LM1K649$=MV0_pOmcQ
zz}D#tn5pjgK8(3J8jw>^&<IP|Z2F|FM_wQ6uZ>r#rF@t0RIG>b!M6ltT%ET40|Os+
z7pukRn=j~qB!hdggE;U}bJ)Yny#oUoWA$1kXxx$ZjswxgJ8~|Izk?R(^(5WhZ#&sa
z{NhYrSTL2d38R=d&ShIvrpm}-;HG_dwb-KH?N-O*@MUG6!^E<CjdF6?u~(lmlZV5S
z2r#t}EL3BXorS95)^+r7W3kc17c)a2XY`z{h6ZVPME6T!KR91tEy!tvi#8?)hr-@c
z0mr$wza6GvBs%7c&%1XA7Bg%tERm4~j#CW=F%{pEMeg8?ja9Ahy~Xwa>l<VH`0f^L
zZH)Uu05erG-!6!8!w%HtG-(_yEj|XyefVa^=SjRSPs*K1yeJXAnDgN~m0*NY`!6O@
z*_f_U0bGihm{Z<pXwa*wRt2VfBFUB&1m~=w*undeeMYRXCa|Rrk*$mgTv%Yp7aq1;
zG6pu{4i%p4^wu<<!nuj1in`}o`Uic}d^0)1`UZ`@2|2?D!(TV%=Gy37ao+Z(7n!Yy
zrP9$zSWkB1pCpLr#-%<I5NKy;<brC$*f>Ln$w(x<c)OIm@=%=1W8I#xG&nSrW6=jR
z2=g(T=jZ3sOG|V)Br(5~Pu?ioyv+@ndKY<-a{bfg0r}=s=kxSHUy#H9K9g4MvyelA
zlcuX&poOlvdR9)V$(V#0*xT0sW?hlE`gUb?)nU&(ZS)+7*`E{RDJd$Ahr@Sv*`bKC
zoSFHB|09A+X~wp@BLD1Q*wKsP9ViXB&mTI`z8b?j6MdUmA%Dd;er{<gXXF@;&Ghl2
zfw=P?&Vn6ON#U&{6@sGwYc2^tukYSw4{w`L^Y5|A)IviZitX9Zg~d|}3W~205r4m9
z2T%Bw>2K#S($T4hEvjAb4!R2vTI5{*jh&(^e|7S=(W5o2?PAW?cZfe3ZKChX(>%?*
zhfxulqb>3MKe45V!)B8f9F+)5ZC8hA>7qt^(?50EeW4ZmgkJz3;8}9u1)N(K!FbjF
zzGQe#Y;<(fcY>?M$WIhb;u{&C9=u5~@ok~NsluQUkA2VR#BUZ#5?a{WuADK>KYYck
z5a05*MqOQ<DNafc5?AvT+pkqqz9huLY6b?aga-&BlhW5Qz8QLYdVenle+o9aMAy(}
zxlVZZsaH!lW6}}dLsy7AGo{^=TKnYSOEAr9P-m}SV%|wy#vGVzfMW)3YcK~WDkMYz
zDp)}%?@M=+m!BCvyBI$&ZfP%$bF@~<n_vXvEBKoe=N>L9adSon4V_9bBk9N;yT$Dc
zU-N1us-oF?fu{ekygce}Lt}SW)}ZC~UO&eJ1_sT&7}(2`Fzfoej3aP>@ZQ;)I4&-3
z=M#xT-9OFGE{mNvE3wGM+IO_cmRiQjW;Qg?fXjVY&o>?}k{4$Osf@$%fY?Qr>Akqg
zmrgDgbf+iDB9PX7P<4U1|Df;H9agJ!XRtc|8WR=8Jf^feeL3*9e{wxD2ZxrUy{xY$
zHxxSp9~iP-H_<wM4N%20!G?k=J(ylLt1c{58k)29)h`_NdhkKzr%EyUF0GSJgdh`h
zFX#DF-xdWvKEA9?7G5U09vb7Xv?-6dxG1o1bMwuVsKsnAtehIPNoC`AWqr}->ghue
z9#Oq8=6hbps$YpjiqUw?C7Tu*6xnf-lf7iLGPSp7^7gK(!JFbY{jAbrC*WgmwQ6m-
z%y9682xdYms`PAZ*o<1{D1neY<upy(UCcZj=H{-({Rv}-Cd|>dcwSx=X}KlAV3j+I
z`1Q+Mn(wBBMItK?&-+8FfqQIhQhmj`y8G_Ce@zl*VG)3Md2y(!XDnM1Jtw=q0z!Yv
zu=@MX?!}f(>l6k*zrrWc-@ZL)CmiV|nx8Y?Ub$ki%bl&9{6kKcbw3>pgs6gCNT$?R
zmzUdxNzR(7$T+gNcV8A4J1Ert87|Lg@VBhQl{l=+%#?DhMXwggs9Rl*D)fWiOhRHr
zRKYNf=e)3>K(VitwW23S;e}*JSwI)ld{cFwDs}0`*|ECZ<`qnO%RPNZs$#T1#sA#+
z2LsBkPEOG-gsJOn^v`BO#lZyRW>-ykxM90Zg-u7OkS*t7YSmqDI|VDN{0EDIhRx=}
z`vU~;&-dVu)SVw((>YXJpZ!1UaN!+YyidJDq~{MMhRQFY0Sy==qoaSt!eO?Er<`~)
zIOD6K5!G3flJZ(ANtsue!;nh2N~X^>Ha7Z&n%Z9-MqZ1k@~QtRCz@Bip>~LjN<2km
zxZ^~<{jbH!L*K`IEpsfnc#Nph?iT~VsBuC!cZ!UH5PyNv5%$G2KJ&qTh+ZxGj0aFt
zRH|vma99YX5{~-%;<j~lmE^C6Jv8Lw<xS1Z3^4j~{o2emtLxYIbMo?L6uz35zhu?-
z=DWjQM{s=X0Zpv9t1AN+H-}uD!qPQcTU&(+E2j(E62D}n-31+uk)u;>opoQpC(VVO
zn5ymX`|0)druMgCi9V!Is3vgj?eF`;TB_C`o!xK2XV`eKWP4}l7a%^}cN1`7XC<vV
zrYb%;H|s~v)18Ln<LdB=*`OF5ot^jov8Rb!TTBZgVHB@!;8<E(cH(C_yUc$klteH*
z9u1oNnLHt<tlT(KOv1m)pqv!g9+91zk#X0<qq?oD;eBUkM<?C)yUWYD+GTBRu}6Eb
zl|qvE91o6q+uy&^wzfniC588dg!(NbN+qDw;v^wARM*mSV2JxrGW8+AVM-ZN*AVPd
zV>cX<i=C@;=WLR;c^3QSNm`g%5y(6C<2=>O4dp(5hKh>i_R$lSrzxyVZBgFr0Ri8-
z=^s4!eAV&Ir;?IeO0F!tE403EpZVfQIYBM&vdq`<=Q%VHo<5KI#Z+pOo*;TI)(zCu
z)GPJrBz*rj>;+F)yK0NQ9eI=HX5;u2iltkiM-=z<*rK(q?YF%b5h`M+@$q;Ps&IoM
zoYxF~f8X#>ywKBYXEyNSwYdo|U60aCmX`p&i)(d(R>b=Y%Ra?$p}tVKuyyFmENJw9
zAcExm`N-WiWn*ax*Zp8LT18JUxUS9`97Cs91|Na5iN;#f9GDn7eOp~!{cGuT_GJph
zh$Xi)v~|tY<oT9!XM3R23|VO6tKSM1#d&NuX%imW%|~p>Ljh-}wA;$Xr98t-8XGRW
zo#Go`f6e^+?b~h8-%WXA48#)^%n9kTH%fT)RiRFZ)He+>lk;Yc=GYeDAoZS7aN!P?
zZW{2Dkc;lDw5d*bM)Hj-%b>rAeKZ5Tnums-{%!#)8`~wf$#xWnsOUQ*eQLqTaV3KW
zZ(Nvypi=XY_;m$}2v>GuT3_nT#DZ_%>+=BA`R);hDGtbV@KIAs*P(7|ZzqR=W4)^3
ziH6X={ZNXNu&;74$!{C`PUF5l{<Xowq82&CWs}Mci~gK*C&T*jq35<wq9uNpA@F~?
z5t4p^Dyw~GF`d?}t)<pItvOiNYp68-8j?HA+U|Yav9dKiO(-lZG`F-2_a;QQQnRrQ
z?K7G4P_VvoCj$>T@vY73>d~Wr{*|=}H#C<2U!j9|hbYWVmXN+q5_}f4$Gj7_UVSY)
zwrUuj><FT??(OIx5Eb<;>C!D4PXD+Vs@k;s-~&8mUONp{)nCU%pJ?f13l6)f=4c;a
zZX6?6y)I>V{(l6Hnju8k4DF1VSZ3z$l0t3{4*8TR64qK2){p$-<b_K(bXU@bA8It)
zT3PuwzW#UdUl`>Vnd@_eDen$)mVJGPn-AaO9N>M1^*YzUU75dBKY#E6OP*L-+R1Dn
z<rt&X-ic;p<dXeN^UVa|<NQGe8@QxhI#2Er!v4C*r2{a2ZPS5?{2zBc#CUl>k+kJK
zB#>@>rtj^2!R%B%noBS_6&DZRr7$!oX!FZ6+S|8(U8Jb7zmLj0Jp06$G<$J`YaV?{
z`|C3)NA8`AJt$Z`*QKwi$vW%t-DHwm6!a&Zc1zAunzi`o*15q!4NajZ7)d9bs*Rd3
zl%OfncOu0VaAOIHUrdc=515$lf{q?`O21n4Qh)IxWMIIUj$z~GnM&$x1GEg3;1p?u
zUYMDA4?>04TmSCkj4`S~AN4gl+8+R=a4wfN@ernt?x$J3=4_L8z6V#CdHDF8{^&kG
zxR)DIG-UVivvFOhOG5ke0?mG_6~$EID*-pIv9vJq^FK>T$Q<@k{m|=oHfxbJS^7aq
z>w`wVzD5Ds!P(jH0v&8(d@iafDe3?F#2|l=%O(EIS2_6gV|m_H3#W_tfsglts6Kz*
z;k4F%|J`h;u@M(Yo{gRT*p3HgW5f{>K6-l5W3QP<qaHj+i*a#exFuA<mzc73aFE(~
z8_Ea{@h<*!@L-a8r55%j#ZiJ}1s7L5!Pm*sk_&urZ;%cqkHXYE<>cf;*s6I&Dc00f
zzY+E)ne2!DO&zoh`}+8EDZtnvLAJCM6hwA*wgzke8tb`QRfYyf2YM9OY^YddN-eCd
z|HV`uMYnh3Uro{V84YpxUX9L(bVyb8{4&2Sd86oTE_UPEwcVS1Jd<lrp05~7_*hy|
zs7BG8GG#`O&giU!nBG5F+jgOYX_PGVBX;&kolsKl_4oPt@j6Yp`cr>6f8~8rKmSzp
zrotc|@2%A$YGB|a*x83@lF|B6xBj%Uv@I+ul2KD5>FZas?_l#=dPPgp^!Fb%Su5Z9
zOFr#1-f<k9t?lh~RcarbR|X*;uQ)`Q85>9bdlf^E1<9bv&C$f<q|*j)ZiZ8Fd%p;q
zKODb9p>f&LJhq~T9M(<M3ZugWeIF}U-7m+a4Al|9p5M4D`{MJRm&-$Cs&R32bu%l=
zZ{B>7NRvq9x;e>y6c#A*V6RsW>8oFI0Y^|kz$IVV7(LQ;bUKxM>%0oa^!-OF)@5o%
z{_hTA=l<pm4@9%d3}t=c1DB9QF+L+6ic5=`0p_;0?;|3zm!_b63WgS?L-Y{92};0n
z6FV&3^*?lEX$~ELCGy8l<P+6v)6*6a|3wBa;$uXOvfUPO`+l@G2^PbZ%{@V!N%s9|
zhq$3SBsPFL(91STP6j2)H5}{`&^?_p^^5Q?*Ew(J6wMpu8$APb${Dl7eMb?LIQB4_
zRChQ@8Qxg|V_h)A_A^aNzSw$H_pYFGj7Fi=uZtTgFv=~Z&I-%RWYpDp%uvvWvZ4c3
z-ZJ<9)7X|Ixmby`zwck_JMzN{&%Xca_k%{K0FB^QoOqL;w?Spx8S4~e*`2I1bh(<r
zNuJjDT5L+kpYMztr^lBbA9lWUrawi{*VR>#Q^JN8K(yt<FLD)V1_7MW8RI~r@9ROo
z(4}{;W<5znXbV&{^4C_DS5`j5ZT`pMcT5SGiAJOKBR#1uV|Cql{e$xbv$@shLJ#=T
zW8($}WRrhb+t{o}?Po!ZrAp9zPJU(3OO>$=x9yKN!(}rwGL2Q*`{Ffe68iSM^83i1
zxy*@nIsZoUUC%M9vwt7<_ji(rndcje4r>T7c#rPCeEBj1MVp>#bt>ncEh#bbiLv@!
z-mwpb0Ey(qUP>sXI(2Ax%pa3p>$UpI-DPfLvwU-S0HrV}aXtae!EerMv72}vMguvV
z?kCHbf2jyGu8d5!t$`ZUV+`6=0`+Dsgtjf4H8p~B3#J_>ir5-|iQypdb_8O8^Da`^
zED>Gf@?P*!W@{Uz*g*RjvSD(k{)H-Izh!yC_rte!Z(|M~AH0y@DE(b(9DF$3H}R>*
zUAHh*UKXz+GGIjWE+KxqP4R$dqFo_1|Kq@Pkr>l!8;`4_zI}UIgw(7&fxTCIQCs%5
z`11n;bhS2kW3AIPsJw{pv56D6$;jN`QSt6QMAxaog6>YYpF6vD1pj|9u&<ma{po4{
z#Jmq1YJ5_3voHFd&BuERt(foKIR;`JI<5b@Ib{bE%3iWzOY<xP@T0@!7Z8X&Z*A=j
zLj_{Og1BCa>s9_yPVaq8+t)@-5;VQB5n`6)@!|&?-(A8Z@JXs6O;G;7GA+~9WyxoD
z00RP1BKgT~ujaW^DbP=CyGG+pm0z=VN8bu2k=@_(^w{L^BkFB$54)<LHFU~|e~g$*
z^m2m=JQI6mvcCGsqPc<ZSl)+Al`-6J2)`hJ`D%Zv&$22QurL>}L7vK<aUE*25h59u
z3y@ut0yG~Ltt?#bze$+_e&zqfFdo-H+Y}?{!T^!_BHp(B<&KaeB*yD5EZZUt4_9(K
zjsu@I{#a(5e?Q-eq>aPAHh)Ievgx%^wL5;<)z#!sYEx|+E%kipx|)aX?M<)|!vC6^
zD;L9O=eszCPaMKKnjDWi+m{*ic@mSC#{#cO>{XJ06H!-!fW;sozu}cjC5~=x(Z_`G
ze31l-g*DY4SBREsFZfBc4i0)Y`h1uyT3h>WORculFf=?o4QL!VxLtsyfQ>2Q{(td5
zUmR21;hW^A6crWKMxrSjZIlxD1Hq@=5M({}=lc<`^WAzI4+orwg-_SywX1iKCH@pS
zxESBss;WPt_(*njmXvsrKFXE98^d1LFLZx+1oxP3y{JWo$8tdI`gNBJ`$)w1S)DjS
zJ8SC?z2<Y)j9N>J@t3VNl!JPkt!9r5D|wT$hcrc;{;DzrX3}))Pao1!QOzw1**iHc
zmfsh7bVMYs9WU;07~4+y{+=g;#H?$oLohH2Sn3fV-<T)s(y(de8W8$-P90$G)qNor
z^ZNJa=o%BI#3$<vU5?`74gWv(-ZHGpc54^LMnwTpx>Zn6x{**2X%JC5q`Q$00SRg8
z77$P=0qI5o2}z|J>F$`s9{2QF@3S7?wZHx2JN9wxAMZR|>zT|s@B6-TTqDkLj`z%>
za0U}y`L26_-+L=7v*1HA<ft;=Dwfe_BL+5-VJWp5M;D&7O~N&Pvs2~=W7NiOx2GL%
z+Okk}(^t0-ll>q@-Aa!7aCoO*OR^^dwKQHE`7-{r3||7c8rv3^1j}o?zJI?2QIB{p
zQVfeDXXTmWjSXui&6>AuQ&d6|p>N)Jy?u)_JsAx}=?86zz-+N<Q!>+ZweFA1_CxEj
zj~yIh`uT%yzB|2|mnM?t9cgHs&>7iLanTT@3jyL+SO6+U-Fas63P<&UbJ%%#LNRME
zb8{&o8QoO2ZCm3wlUVf!N3d@-8s}ENGuVUG$+7@IDMY}Fp-{V@bk!82N0&C%Hy3>}
z5*<&Flbck({rK?$1>iM{`Awewn}^*<XdmbPCiyqs8$oiTvs<=5Rx1=|hR2K?L{dBF
zPh3l@ax1z6(L+Cq+*9k=VlL`U0zcG{xMA|;Zvr=R6Y(LK*i7}Ks%1%li#xCVvup}?
zT~P>!FoZ|RuVRFNQR_n$xhI6>s>yfsHeN<VgpP$p&W*yNRBNn;5Q~)1|NZ+TIEb!Z
zy#NWVuYdh2c*7Ed2|#92y^zSHB>J+$uYOOsS_}<uzi~sszJSWVDNSRkeETJFaU_pq
zTbr6Du%cCzm3eZ9TUtnhf}{;hf5MuNw{|wxuVI?1+rx4`sz0Y#wkbo%=SccU*naHg
zqidXor*N*upE@OkaYJHYw6^vo?xj7<m^sKHmQ_{Ni7>v!$S4Hd2u-|G`i1MAbBb$*
zU%btA^ch3MpFih^xNJoMkP1<_gWh|+>=;8>SmgYLW9<gjV9#?quOs!1GszzX(@e~E
z3S+nz7h?khG_$547WH)$6cY@<%>ls}d8ZV#o`am>pD_ohrKP3oD8hp#&$>Df{-4X6
zzZ|=XF)QgI0--l}+wAa~k!2j*m$_E$Zc>!=&;5*|qR8`Y1UNW%9NeH_n^@Q-DXGBt
zndZ&ILN5qV9=vUc++yo)h`_&YX5c)NKcvY7N#t+l`MR<6&zy1CUHxL`=%V&i`J?s#
zjh&sHm{R7~L{29x6A2vge7hBCEaFYYne{BC4JPBBdl2Yr7^&nn?DD2u#DaW!uvNtd
zIBwliloKfSjEyBW87w*jWOgSoyu7@qXlU@E$dfRny=rni1x-LQhUFA^M`ydXAi<8B
zg#~ob)$zlWK?t*ZGiOA%?B4Y*wB=y82^*2LWaca{fS@C4B{#o(L;gW9Zc0{Gcv!8%
zx1qk_wfAp$lu(4Zet7TInxny*P3`G>bh}bATVE_<Eyq2b<jR%TLqjG+?RPjyaykvd
zhkCZodbJh;tfH~MAOnYlH@pDIFVi-T!89g4wbGINB?PwT?(Vo`g4W9YBM5?y%@b?M
z(Kbn7)wVl-pMUU>%VAxCi>KMxxIIbcY2ndhAptsuX(JutK#|CxD?~)53R`RxNL*|o
zpvY@lO_YS%x5~X%Q&3y`lztlo`ni-QnUBt~$erplEQ}@BaD6c8j(fdf?8gVZH`|<B
zUsQSZcKE|PjS6=MM-#8aOGwJd)B{oYfNpyjaU<=&Dy7Mu>hi%%(Z4@Jh1$HlWdlb`
z?eOp^;uw~jZb6dZc*c=Ci5pYr78w^yY<hHbKH~14PiqqIp3maBb!=M-bgX~Fh5A^w
z7*4-@n_?G&0e%4ipR<nW<84z39l;mI7LukUO@8SjCYG0VLJ=4+06)NUZWSqj)|KWq
z?HsTOrc_^Fa)||%+V&Q>46wjf*B|!7dn8;O?5p{z1=gkLQDt~IYrNnyNNa{_qq?mF
z=|oKKFFdUzB~515;naC7mokYp7ASI^L8I#JH<uO6qjMMn2cPg^f+nNCLzuvFGH~OQ
z+cCq#BmvLbn)CBNk0j5Ej|i}_4NY*cv$F>vOr750SLg26?Ru0No=pdD>eu@ExO=A#
zb)r1y)}(^(+AJq0kAKAE0Pk@LM3{2`*X5wGT)A^%7iCR*Gea`wrBqy1n9b1qJROvm
zyaG|i(-@$UJfHs&$7HvBH-1S=>#R`b&w&KP1h?v`*9kc}W|GrU9v-TjHyw>C4e#3U
zym)X2Y(OiFn$=ZN|G~w9ttZ9pPXhNdcx(6GN!KYneQN3INx{@bDpypf%XjHh*mdP>
zd~iv<DG)e&Mv0*jT#r~pEI-}_<Mh$a(<R%n-?$Ob&7fS@*cfG3{aO&m#Sh$Ipi&MI
zE%tuCbk0mfZ@OGw^z`#bQ07^jgT3(F+sUBNsnbnA=Po37U$Y7@E*^EI^}aNzhnK)+
zs2n9#0r_eA4JA+^jJe=YvdzlXm3)3-O8>B+s4d;wtSfGOr#e0%VSH@Ny{L$zoKGK4
zzT|ZaNY{EwPDK^jhz;f(hH*ofc4EGbvq}&WpAL79{2^#i@tyORa?j<G_D5=Jrb!=9
zf#Vpw;!}j=lM@4%Djq*R#na0U2J}8gQ<J_W+GYz1GUMD>m#W@QtRykuB#I+O{W^PX
z(#_;cMshMaU||=w9q7;z=ks&7PM!T~(K<d2Y(e=B+)57&?{@d_q~1+-An5YOOv!!Q
zea(_T+zJZV8W?cBetqZMT{3~AvwCXMZ9n;+yZ|R?$ASuX6?M0RwnPB&&8rwp<tj6q
zjRN`F^cY+=vlvC@qeDx^&;I?K6GYCrJKuP9l17pfrPb9h_v9Xz4K_YT+%o?D{#h%r
zyC*0!KYm<XKD>S$vNst93@JjD5X=d6n^iuPIifNaJfhMayl;kLSQ+v5&R-I`f8r+2
zO;CO@Q&v*az<=v8s|1;ubxlo5T}5kaUt$CeZr)VG)`3V;XsqL9@W7<kXl5Ey+zKXU
ze@3|=momEzH7L<Q5#Y*@Szl2rwerJ#13AF0dNnx8<SaMHkzJBSfA{X=8@n-vs{(J;
zS`R1ugQJ(GTT6++kM>%?lb!u%{M7R=Ibjtmz%YBmw6Q&wO|R9ysd^kNrwIDdFAKT3
z%Lkm0P}6BA2x`$z7b#E%G0yZcR#$W_mSPiMrO$K*S_!V>-4!3w^$qK_?ZFlZS=1>p
zhTj*bbF3tXLQHidl_sCW*b@axS67NfQfuEo*1oyYo+P?_tG7y6CW|v$Oh|~&`mk3+
zKy3X;$op&NiyZM@frIl)B_;OLLQ>3-%S&Zg4sO=Ae9&PaS&iCoRN!D-y8ITcHKtUM
zWIWfyt|~y3yxCVdaBPRFJ65B(2AurS>PbV`_NEUl^Q7OJWPnh(cMs^V$>VLU_M=aC
zs_f3D+TFg6cYhOS_t4T>)o%D!n-!$U6}y&~m0i$q*<uFoi2dQ^6$T3HgWaZhFm-e~
z^E@*21%!nyPMOBF?3!M_X@fq3Udy`mvw0SV^Rrf0n_bLGYsB2LlwxPF1}P!IvPzd7
zw#GUPqz28z+V_qRSlZT(H#4gHrqJimc~coFH7&67@<&FggcOJ0=OO{`C+B#$xM~Jb
z$|Nn=&T>jhwahQ}QRf6xJ1JT61#(TL@=*&jZlsfQbAE3r4P#z@`EtE1Ev<!DMi*^(
zB?D>=(=6!ICrl_(*<TTVCm9q(nT`ANRheun4+dZvUjl-MrmQfYN8ft20z|IA2}|2*
zw6e+%jfn88s8H=c-u=<j!!-ClB0lh#7a3O%jIy#aEB<*PvVVO+iQ?-zupnGB8HG|f
zMiFDq;uJ~$s&4o|N|b`yH}RB1biwMge_;W97JGSx-%mQ=dQxNwV?nTM+V0)ig~uDP
zPrz}B29cqU98eHL-M%G`6|aDsF5h_&kH!LZeE05M*sAZZOF_FKz*!&q8cHdq=qGm?
zAa0(To@@cdp%+I74_nJpsLg&I!;+oEQrubWr@F-!D<>P$uCoBB^M$T0$ppvi`rMqH
z=V0%r)O}eU9|}&FiRYqO*ugq`N?iOkxA!=5s-F#LZobgw`r*Tj#h|Ib)Y);*7)b#F
zhIhBE+N*chh4j>3Y(E7s`$_Fa>9Knx*!Na35eVRGe$RtD)MjSOgq&t40Za1yg#d)%
zB@=jry3D~%{k%1Lfj0`+o<c&HP67lGe+L9FG3$p&Fedhn!^3YN&SL$zR~MruAgLo{
z^C*z8_R#mk=Wu$u>8UAd4oHr5nE2Y%SLsA@{TC)wrSz#jm@<#I1!6TH>E5Fe{-fP$
z9CGqn2Mvg-epzIWi;H^<z=zpc<97RM*IuviZ{Ln~8wC=l7dLuT=w;<~_*Lql<~X9H
zwef(mRgTy5YI(=wjDKjj&A>#Jw6t`|T0^NMSr-9|#pb4C_rQ<d-Y?zV1=bFrbnl|h
zF+I4M1YA1854RMS?nPv|xo?YI?Ovn<aAP!=<pm&F(-~K@YG{oq02GDMJU1Lyzp_*y
z*pa2Wr%`}{5=U0^+$xb_+~VSWO`&mSu|80QiS;GTUTdNYYsSjWhN%{U@*%rL17pd-
zJy6cF)DQKr?PV5ZpFTZ9k!0Lo2?gf^0XQVl{Ha8ziLaHXyVc=zXB4uZnVnuZZ8s?u
zOjEILumGW!*cl<57v4YkB~4674-QIVr2y}s?=Vua2erYaXRK6INRGC08}B3nFz7-?
zHGNtxb&om65};0NJ)MM$XY^OWEiPoW-p_DY1nOoXsGH(0E@WV}j!#Tb8{e}qt*FKU
ztZUfe9f`T?Dk{OD9vxiT%R^`0Y<2)tTI$VtQNskt@72Ji5Qr~mhY`*La0`Ag7_H57
zqjmu^KM2td(0L`fi&g1^xk&_2wLZ8z!>yoXB}=K8Y039P`k;cSlvLfXrrvpGFs!l2
zNgMm84;-G!v@|yhtExKBl;aQ(U@Iu}wpEh^ia-Q@;BaffW|8*=EMEjqduQ3Hk<3jV
z<_QgJg{I4@sC@Y#bMllYll>~r^#1OU%TCf#%5Nzl@wXYNAS%ui_|QMnst1bhoTxs?
zA2v~=z{6|V!?=h6?1(qqvSc+he83A?E-`b^Kr-a|L~DYdl;63AX3B2;mt~v%Cl^Ux
z3P=sg??@_rx~gvDQ}4fmJL{Ar1i#Bv&FuO&b(I9It_qG&S+w;gRtR~4Lx%aCW8idK
zWyIcgR!NEM)=oQl^BW{6noskKVxAuz^nmm9!<5eXb?n<dvZx~;fuWax6O@!Y7NDbx
zEokeqD?1J5@O_+0vb)z#fV<XqRve=O$TJuYd)|pXiKY~HzH&vx>TD5)?2{*f9v-k2
zTu-AyuQw_mxCDxvdh{p<<IasNj3o+2|8YQ?gug7!l7RG8?UV%yK1bOXdwEJsTHLx3
zfU#J7qNet$p~0A_9!$WFY5~rUkRJg{R=9XN00vC7mKH3pVR6})8eX9^C<G<<+5wPT
zRx>S3w`*X6Ff3?q<+B@Q<mRmdxMPg%MFNJx=wvF0Raj3C)hQ_`C^X_$AQ+O!$h!W9
z#>R6`(iM-s9W9ry=zq-}b)A%sJ=pA~NxuWhRF}ncT~SMREHh?wJ*%Um-@e@v3u8WT
z(%z?f3WjIF;a0CqzP;qpX=5k8nhO$O>~ehP>2$3Qi?N=ONyp67X&P=VrKMR`SQ-)%
zy1tkmxL~-IUWjXC9LaDP*3a`DqG>xr8*U#HGY}-`;%IeTzuofC-s<L}{<vD%BP+g;
za2w*nLiTuD2+P?23Z)fhJqRG@yX<zjFuIf;k5N-!AHjSYLlB(wkb`bNST>d(HywMp
z1nyfXST51E1!Kvq^o&L-mio4T8(3P=N2zIImz*Y|G>VuP5QW_TFc{{?f~IqDu<;}f
zJ@Ng`n~;k35@6P2a~a1X{c)HNXvW7w^NV&?S3~YSo8FPaXRI1r<bWeg@w4wR4YMVq
zJ~u6`e?KElgVpwZSAkF9JhR}Hn5=`6U(EXv9g2mXYm=qgJ>lWjDMZz2no<c;cZc6`
z1`F*?yF)W+@QQGt{PY*E^Fxd2&W9P9w~`x0i3Gr~Wfrjnl4;4f7pbpMgh7zQPAA0q
zSejNsN=igcjf~a1Kwg1|hiAO@9EEOA9Jxjl8a0ufc(V|v%f`Ii)bHUiB_$;etDXhB
zX=T+lP?_YWD%gpoqVPzS;uaS(Tb*m-xr^85IXJ|m9eM1AD;$a~BmG}rDF6BF<3p=;
zB^qrP6O;J*ci2#8a%tUJML|~C2@KDZ?xuqrtPAAMtB<irUL=fdgK1*Fn5WO}r)8of
zP3EGNS9%9bQFa><r+2jN<v3v8d69yIh{2XqRaITxsTR1&<BE-irN!TY)1|fefnt=b
zH37A^VF=-f=_~{>XjbjwH@nslP)ZIq#7q_|aUhrLy~j2b)`>UX@`)u>3n=V-$jxmW
zDAZ6)!wQG2HV82w|Gcs(U3@9aE<5-r?#J5s$~JCLivao;NPhHR09Uj?gZ_`4hvWbQ
zTL2_Po$a|jpPc)kJ%c%VD0q}?d`S0ORlqeG#k(S+?5v=ss(QM*6vl<mHbsmCLH~Bk
zVhDl{mZ7V!?<*FMH<lk~IkpBR5x3PH=$g)P5vZXB?NweSCC@$Fl9;tQU_;#(^IXfy
zqK}^fz=rfR4Hb~vwqw48@`Yn}pq9*eD27I??l5(!Vtb&RkXeh(I{x;P60HJ&_Wt-`
zol@P>-UZB*fdJU<pNe`@_kHo#%uHhp6JE3X2@F6QwOD`wRfDT@>8$7ceXW6kfz_W1
zNlXhMv5L&j2SJ_Z`g~n;V3guq>ypTY?H|3<s`DU&ej>}-+PZP0ol!_sl+gMfXchO?
zzE(pRO?{pF$B!RO?co_2w25x6M8Mv6qoh5AY7IH)pVJ7mC-8nTDc5eq*BgdoN7(ap
zX<69>bh7bV=+I1`0o%k7_wt6kT#67VG;L*&A3mPwv`lc#g_M+Zb@hu3lLr)oQN2H3
z_lhl@!G1Q`E&48$SXUI0ZE3Ce>JYU1Qqa8QIbBNXx!7#a-ToE`cgQ}mzH1OwUd~JI
zILmxT;|O2fX-Vzia7D)d?2240886hL?JqE|J={4KsCAl{?qLuPBCb!^G&VB2g2kYF
zS6R7)LJ&%L^rb|<$FEEqS)}vxLq#`vLhXvNCfXzdtO;B~La&)b6h&CJlwo+58^+uB
z@7-hWS=idvS08P$;N81qfb9V~fDBrj&JlWF&7xUDc`zf;0>}mDuMG{5>wEG^dTWgk
zHlKHz#PJPd54k3**RNkUbjuu{Yl*D%1Kkntz}K)P@{)&b7u3<CwI@4&{`%@>_i?E1
za(|ia^(W>68?6$ATudT1Nl+hX$nE%8dtdLt()&uQ=~l66?R-F5?Dkfxdlwf6YdRG{
zN!%gp_QO`-l}p7gKzuWXt5O_zG?Lz_sbRC*Qc{;Bo!DM1?lK&1`{Jgqb_fNZKS~6b
z-_fCYk&H5&(mE9gJ$b>g%MPCb2WGX84{c7hE44n^=qin_>MYpfKn&SdhDRIp`p67W
ziQp--=!t3B%?7(Y672TI<VQiIIt>~-BPch>U?`jA9~t5IaM7chlva>^5Dei=oMtP>
zh3sPO&XhEdYT(qhM;4b(ATTO4c`bXw7SRsoyY47+>Xhf|SG;4be7mUdtEo^9HR3nw
zE9oXX$S(i{t_@k|`nr;`=(TQvN1Y%>-xQqft-Ec?Y#baHdbYN4Z0Z5}+i(apqiw8D
z!Jb)+ifv|Jjn%tr*1Ig{BwYOwfLu%=%h!Vs!shH$Gw}$-+isak{m#Vkx?%~=ql3M6
zxB8^x0~`QVoS>q5?i)-IG-#&cL7=YK;6QGwCLKAQ|D%H?qDOlvCXofnujy3dFjH;J
zx_IG215`n7b{4*J_3E8j1*qtPW3sZ8MlpKrU3@vj28v7tSQcodV!cVs;~O^(y|Jq=
z+l}l!(nA3Qjzz;$GSRggCu+uOh0c8T5zcfOOW$0Bs`dZ!w0&~>#tVqe%ed+9#~pCB
z=eh)*x5cZRKE}tx^M{(gew|ifVeKhJMbEZ&f)9kc&$L4*Y0+BZh-%@%5f$py0btV+
zBWN+f1=UBH9n8Of1JX6`mbfS?o`!_8Yw5u@b6scBv5+UG<c^Cz6oh`UgSirIi_O1_
z85<kRb0!>IO^~Zuw6RiHSV%e!xDgVdyLh0abbHg0&;7+IOLg_2*%b~>&M)=#XTY-r
zMhg>y!PV7G$<IGoTboSCq#2@FlRPj$d><Eyk|3^b{Tcye*L?k|wX<vr;INmS2H+pQ
z4?<|VEg={zrB?13y-SuB7BzLR>})Tbfg`pAHfLyT^Y@QzuJ;ry#H6IIu-7^|p_o#-
zlZ8;_HY<QCf6hcG{3>8`^J?vuq2UY@;2Fk7*EdYV3g-Zk1b~sNw7j9P>JS-GvDIVM
z-{=q9)9XB^4TF=T<3tte$b)lKwV~e(wy6E?cq8`$a!j?m9gzSW7w}#lB9rbwGz$LY
z7m<bFQw7Yts+!u}#Flia(eV!%>h1*_h3EMJH+OIS8y<M+AGx|Rh>P0*ALOIsqf>-=
zr!XLU=aUOB?}umV>fWi3u%EC0GK}8>;By_QBeGypfi*%HC;}X3lt5g(>aYhXX`KTf
z^?S_w*H4kV9VoRqv0MEj{Q4EEw!fg7ik==XEiDahFJxkJ4`_5+eYpXc#%1-3a)nGx
z1hOfh&H!&O5Hw@9^P{dnwg%DM+-(D6V^pQ<T3rB<HIrf2)#(EkmJ*Mp?WH)&mCEBr
zNJ@41bv~ZQ_9PJd&u4XmxW)l{P{myBoA2|3Ec5P+b`i-|%`p8;0hlO8gLQ@2^>r3f
z?l-=G8nEtZY{YJ)&&_)9_%Xi?4;h&LKsE?aZyNh*x83L2DI$mY`Et^wMuo~1n_U+`
zuSo^J8-~U1s%t#|VcfiKU)=onoDP16PXyL8R<tjX465}Odc@WQbBHkT?B<F94k&*K
zD{e|kA2bi&T^0W+kiK<{Cv)Kc;h4f{Q7Jqsii(#Pk2nzj{(UOUix*e!6~R0K@I{k@
zl^-DV%ud^PC4pzERC~IWJLTnT0MP;P4J5x#ffdl0F1PI{0yG&4LWoLBPY`NfxVQlU
zxmQPrr9`HP5(2(wLGaAc(KU}xPkX<Ae`0mJ>e&nd!NLt)v97rbmV4_Dff>uoIti-C
zS%P6czCLyFTT|11r5nNPrZ9b`!#fy#)ou#G`+`kyLYA*o>CiYpW;p=ubKe5!kej<7
z1N1-)@T*=pJIQZ7eHC`1VT}-IG@>aVKH!>}^|t0fyhO3;;4bvk)`*XU!+9{K@aZl3
z(Kk1DG;2NT-@m_gTv;va4ylqweUBjVijNSoc8T-zS$MbJK{4>_kd>!-toF@*01_77
zy<;UU@Q91!g`@czDc7fSkb*1n<VkryFh&whHp<k2QpmD&OCa@qxaBwy=f-T@b7XtG
zS*G7QwtWUd6F|b(F@@4MO^}irepehMbm{CVfTnn#xrlFR^BRO_0Fb>=-(4bwr+0RA
zAQ~=^QXx)5?N-VDex+eYjvpP`?*b^mB~HzCIhtwwYyc_uS-`Ws&&u)wy#qjCsT$SB
zN{{L3=x&@zS5T(qbv<B$5;U!)-a$@|lY!QuNlE@7o=Qqfsi;!`G?sEE$shVF`ZF*1
z3c!YwZWco37g?g?{26JI@n64ueaQFEK|MNPzVr9?b_C8GSfFp7;HTS`mlnM(U-kTa
zvgWH_nC0OX-eYCulaQSf8L5}0RM1T0;=eKT<YB>M|L<f!dwY`saxHHM87RHl`_Dj+
zV6vVjZL4qx(Sl6F_M!?eo)8cxQGqut<NKZ4xAjJZrV_8~77_q#0b_Tqacg%Y>9{$I
z0y1mldzWS@z<HGVy;-bHHL^=Ny~{DHvg^sT8XN&-61uu)z~2!78h^8r0NB$N>&+y$
zZhiBq)pRc}FQ0WD17f+GB_oOZYgVC-%aD*s3OiJ*S#Nnrg-N?Xs$=c~sD+pm6dJWJ
ziXp%+aNN3o@txxv3`z)j^}9{CDn)acHmuCF7s+T*?96RBf>_Lq4|b3ETa^ZFdK=pT
z^y3k#x~mAtcn1%|tjv(SAu!Ghv{@jm7X}OxqO@4>j~K8u@Aovtu23L;x6>hri~0^?
zOUpVXg&YV?H~Sq370vW&1Zy7bl0>6`+2|sZ?Y!hw{AmD?oos89hD;v(_$QpifqkFG
zN#^e%Kxh|oG;*l(VUB9)jgpa{KMSotO)R!1w0>(Y3wWH`z>JE%tn77~{t5WSUM}R2
z^p~oMir#|C_TQJaA%_Ln0nQ&~LrP+~oq1!0!v^;PP;_>2zvUp<MD`$L$XWMXBD&IU
z0vW_O#Khhn9@_!Zr_ME4(3Ap7;>22(gfo?3uK7bFquz%ZP*xqBQu;l`pFh8?sF1Xv
z$iq;;2nh|<E6}%`Y*@jeNUFj82+a3P4(m4k4`z1P!eVS6ybOo+?eXi^4JZcoy0jg9
zk15psZ3zM({E6Q1>*Qu-)eM^F)(9N$-HVSeQNxFNExRaG+;BC_*GlD%NXG2<nT#Zk
zBmTW_mxSjQ7Xv^G^bI1{+}=HR`M~4dyKWCR`a4jKo}$_Z6xEe@yV~w<yeAnW29NuU
z3=L~PKFtN$;kP#kM$#D6HlFc?yoHy$lN1!Q&Km5*f$t5SXWEit-ikn!gxRo5Ub+V>
zP{eZ~H>od%s9u$?1LOo45dj53N%iLql0rURgF*u5!G%Zq7~3F85J+b5<4IYjzJ-1@
z`^ha=V$bY({?i4Fk&%&vlUX75AMh(bj4WR8^K$|=IK^~Vzz0D<<!Y-s;Lh^QhNBQ`
zQJz=k=0Z}?WD=KUfI}1;@g*Q;c_?5ukf%)#XBxHG=2>?*mA%iA+k0JKj!OlYK&C>q
zU-j|f?YM}rXPMWWA8BiOGlivtEc9<AcZy`LDk&-P)nhj{F{#N>6Sye-5p%6ye`OLe
zj+>eIT}w38zRdLHed(({jw0`U)c#HM3k0l2`Wa&RQ$e`m(|!V1^(WmHN8&}qlzh|l
z{d;W)mCzZK2-)UBZ@Vx_*+7iJ%TesvSqVjAR&a`$j8u?IL=JVAnyaebo0ypRz8sa{
z^3;a39PaV8{?e2II|SPRL&HD)J#I86Th$~hCL*FK`trMgixB;5;%&TB+xk(kTr9{f
z5b|bARCd}2c;aHq#LUTk$hoa>AmKDXod_SF!N`aeaJ)WH7P0Z;jE*UvNZal>a7)$!
zYeD_2Hh_eo1R&l|BiB7$62ztQZsCa>Eh{0G{Y*lHJ<$C`Gp7PK=DYocZkb+-D;@8d
z(EzQjf_G;ji=f)LtlbhT8e<IVCUwfIgIB1PQ!x(s2ZQEDKPSu?oZ=baQwe!vbs6wE
z3ajSevG!k%igAcBv~%Ca#)fm!NpcjF>`M?t`!Z~I9OHlu?5%+9d|*)xX>=cr#-0ix
z9s{UHUz?GXQ+o>g9yK>=rze{P<m{cMnoN0av4j>mp%!`N;6i=JIyC-~y{~NR9Gr!e
zJdTvziJ0H9WAh;?4q*AsS;fV!6{NosQBEtBK{JU?uR3`^Q;QCc*wt==yl7!-)<F^R
zwHvmS?>0UMKaJPbDEIfj2+XtGC-(o%N${6s<H_-_5IXG-iRw?_V1NAVnTMBGD8|4{
zG*~yD;17x(HeVS@c>m!;=q5>z^YJ%<AD7YTnUITx<fpG=t9c#>O-#YtK}6szm(#Dc
zyYV+x*g?!W#pP=EVQ)4{&PpHv(divomC?|x9C*xYDCyKRpuaIqA?z92gv&VMXne-V
zIPH=FF$u{hqo0{6CoaBx@zNHxeRm@8Rm_+h5|)OuF@Ea-(Fcer(6TlJ%oT9E<$nD5
zz|t~wmfOZRh3wtC_@zi+8hm>?0fAmgC63pTPDb-eaeV&S*^bUzKO0;3_cjRX1_vMY
z<k|3WY&?a~mBnD8u|OlpBMJU(_<yM7cbGr&67;l+jW**qNjsOp8H;r4v4Z{xVWnX=
z56~Zo_7p$_#~U1Dn!P!udc|P02f!Y>1i_U2w#u?H;+3lMeAbINNm*Hv&a1V95Mg;Z
zs=)m6_*WAim%S`k$28<q8*@;`De`qd`ZY}1Z0l^#OIblK>#Y#t11K5A<!oP_g&Kx0
zu?3vZfyfbC+dvL~pc+^#8eWjv(o+~51&DKfsdZP|Af!4&F8_U3*PQt<encl+>4KE(
z8x(epLD^i+yMp@o5+9}xn`kpF$7&colmaAM_F7}Y><_n&Q<9Stn_Rnl^klQ+VNen0
z)Y2=OUU3Nt1pk?W*Wo-rKmW;U>KL5Sw0rkJ!{Oi4VTY1gR15o{-UgA1eT5LwW}mC0
zxcHT-!)<G&ogO$=Kwdxp9{bc|Cls0Wub_k^WF4u4t#FxQ+4V&ga1#`AF|dQw6s|Zv
zQqe;#(<>aw*hp%%Nj_7}`a+wO^}I)gm;kYEY8|jCMra*_CL5&20;B+_5Ja|+=%;WV
zt#g6r5Sw)O3`jnDr)n7M3e>WAW>jk779sZ}@YXp)K!oLEW~Occ#XzH|m8=}CF{Jz=
zusdE}i5_lHWF}h}1z1pRx4F0Tiq!QM^u_K%iqUEtZ*EhL#+x^7n*I4RfRK1{K#HjE
z!`pXZqd!av{`^^|^RTPS%hSM5_pnI6ErHjQ-T0Xpd9Oy9&50z}va{LQ+2F?Q8t^CH
zfBa~#@@W6~j*$m|z#s(=+hVbg3IdmdpW}bE>V8PprOR#{VBO|NEb8ZXfsb9S$=Zu-
zX%rahRtL=+A0C^TAKG*G(##BzkdUka&qef&SCN}h@H{_9-*@(Jc)&sP<nz7%zOBFU
z3j3x;&eVs4=b99pY$2bsfg=P~X;7t;UH>m6h|cy+;H%rwHvyfy@W0UzxA$adx8I1N
zvGEt+4W{88GqKFO+!9so3o*2LHgsAR1{!<m$ZO@*+|%=n#v*_l;`GF&r3%c})2eVj
z1miC5#=HmM3*eS7D(3$p2N0PyGkq8iaUky2maSsZ;u%08Uo<Ou&VyH3eOMe98sk6&
z_{<1R5fgr&%S(+AII{pRJCbp@8l8SBf3h)Hvptc_gIed|LvBEy14{qF3?-@~`BVbM
z2snM8i;{AF`3W_0a1SfNgO;9knY6DvdxrYv6c)rcUMaZ&2?AuNYE=1x6V9@y@bhOy
zHu{Zo`&tjK96LnNMeFOSLy{{IlG#Ha3RDx>#SCA|Y&AsreZW5f^a62XOH0EJxpqtY
zVw-l@<U?STsSa5-Qt<AKhk-xRbkKG2>g?cvvTkMS&6_+2D{k#n{H|PPrBg3Du}A^(
z1*mb*cvp0#(hoPgMHYw4@vLXs8bLJ@eq{%~XaJnoKmz=Yb7#ST0&DNMuEY|L>3N+_
ztqBiVctnKOU=hW4=?gX?kO>AJQZ~Kzs%x+p+@W|@{}L-p*C*4#V7*uTpsIu3kJ;II
z3gW7Elw4flO<20(;2Vb^9dKm@T{t^~C=^HA#k9N&KN=d&lJZxKPLxy0XZSwW7^OrF
zj~1C;grdWN;6tnj6X4;(L1ZL8m~dL%=__|e%#T=y$siJ2t@ufk8Nxbs!^3Jeb<+b*
zt(Ocs`fgQz4|~#6^q%uoB7O4y1EWJa)tP1|?}38X&M!elhNJ(bCa)PAvE}lRp~+}f
z8Y{|IHc}+*@yDaNF-X9_1=`!N-6*z(#`vNNH@DL6T!vHv-b1zXHF?Ip9E$^mmjL(g
z8!RJevndG3>2N?vXVBLGd@Q+F1FwPaUWt-z>luP)De;Jf@3#BpiZsbL>~QDo%b8z*
z_|yZqI~ry?doLCVfOzJzF%W<S;t3#Es3NBuHST@M*m8503c<sHb&In!2~M7IK!f!a
zF3=XNc$c~dScR%!H)R&Qfe2B6SXlZ5L{<EXB4B30Tt(FMCOj=TNxcrcySfIZI3Af%
z<N>|`*)+gAPXLv?End9P+jrgC8gg9(FT-QSXdfV4`qI*(5{X~`Q^d6v{QV^hIVc>^
zaQfPw%FDx%k`xkevUhz8)Q^h&`HM)<Tkm@r5qKB%Sh?}9UDHBse^2oigSg6Ew?4DW
za$@29zpwyFpFdyi9G%oZXlrVkf8qAvc7l}Q@YkZrjvliBp()+;doKH&s#VUo5LB&=
zX2uh4=>TaB93;q?<2Pbt@8?7%{1%@8$I4P%qXtci6(-y_h$4uT+x-x=1IEDfhL*c`
zBe(7VB)3vM81VG3#>QmtD1Q28qSwB^?})5%u%siif|Z@nDeNu!VjtVIq&->emYm^a
zS)I>h)ch7=-<nh%vS*N*S?2ZOY{xM3Byg{IzPh;L0T`4p)1j`F=FX(Du4h0`uUX@M
zztu_KY{>Db!eTEiBSX|tAT7Qi)>P2UjN@6B{du?jZVg;AK0%8(KxHoum0kl^hg<dK
z!PA=xDMyc01n3wUzpPI&)&VTo((((F%`B6>6DkGH>H2ye)w1wfX3q^)4GF`GSxVAY
zGiWzwhxSyo@7>P6zPEk6Z@;3|F*zG{Lj{Ov_hh3^0!R%aMjKG1_I61Ecvt{83$-SE
z=Z!WfJ~t8JHJ9>tTUHKX^QLVVPbE6p+Fl#6pS*^wF|bR(8l~vupZxG-Nn6U=H1DR&
zo7-Scyyk!MZ#WN#tboCp`~u)mM3BGcoFKj!lmE<}+PLlZ?U%}lQQN2w;4%D)sFL8?
z&eN==23!8($n}IAOpv8dqdWtY7XAhQ_z^^UENgeq9T4{4oSnce>VURO1xL5A!Qge?
z9p{BY?F|Pi1XN}Q75y*PXFG+!Nkf44z%q5Rfi)5+k9E3}(=Rxf6W5*Pz2IW_@xjc~
zpg!l_)%#G4>AHSgM~4MKOY6G3FY4;vEU}uRCMGH8^g|GBfXDz1wx*pC=jYFeTX*k@
zi23EPz74$zM&kI)OmJ(f1gWJS(7==&Zu9a)!SSx{yk_|L#0(fK^&wQfC(k~6_Dpkc
zonUTU786oY0MmOP669Dn@_z{m08^N6z#@nZf!VFQ9doat#(Bq*erRxJCJAtx;*ye{
zBp^_bfBF>ATcdPDmjT%ez9zuXV^Ji%z|D9|iT&{5t7m&9KZb|Nn3;vfrlu}|6pf9g
z17aTVq*SP!hyY^@P}>0g@Ph;%@U^FW{!9q2&|#h;e}8&NC4g_vb8_0r%ZDR5vo~+n
zzwy$Ch_dj*hp8Vvd>Evlzx4`87l1>3d|}}tP^o~&5BVXF8r9RYUXWeM#)dUAQU&Z9
zB0$JxQ<lPTrtArE+C0TuK9m-u_ds(y20r>gG8=%88Kh*vrSheIN?EfWyfU?m!CJPv
z%@He>JwScyl<!feoEi@*KGImAB5E=P)9@h(%+se&*L_K)Xl{`J$rB7TAPjB+G$Qiy
zHu@w310Ns3`Oc%3{BzJ4<#g^I(89fj*c=xZS4v*qiEG!Uz~@_JBrD`GD^YQ@PaM5}
z6$nKdueC(a%+C5=qaR@=5;_UhZ#ld4L@DN35ro&lS}?YSO}KvI9<M$LbQr=ywY|OA
zzzqc<I+5qk?-!%4sH>}EUi25Xw?FOvLg-mzb<eXF?~~S(b-FFjECWc8^AKe6Lv|k|
z7NtK7B&^g;;X1Fg0SaadXk>_D!sLMa@d&k{7%-ugQ2+LV`14DA>6w#0FHdQYtx#at
z*~x%+5Q2Nc;3a*EDiUANfnYo)CZ@2gEEBkdVOP6@atLXaSyp7?fi7j4QT^Qo?`Xi#
zOo+`XFF&WO9Q*j`Q(zG{>2HuuSph7{Ygl--qXHP<h6nV2@+T&Zb=8Q0TThP_p9ol4
zS?NiZ042ejg&lxk)b6g~@kU9Azg}w~$$hUZt(MS|pB`zb?k^`DTxe%7^6E2Hm$xX%
z{6)lR2Z%Yq2?Ewr1Q2@7&EnwCqt8q%-f^vvn^~Tm^oQ*Oq`&u5J5$orFWkI&6W?=x
z19#&FlA!$i-@M>{h%Ll=LryyQIQrQ6eyW<8S}s5K0>_Xo12|?8X0&L1`;NDL(&o*8
z`_VOwHL7s?7rdiu@BHl*GQ?MPL!KP4AMN}aFut%}VKbb9%>cdzNQ#Hdgg10-NTaFM
zyeTo09fN*j#A@45pTT(e@C>-XKFzN{8bvbfDL}ES@q70<NX4*t7Q_RY16>yoQ!w|d
zLLEv;Y!44Oz!8S3N)27zS9B8=kVssQwLV<B4PNx7+Vo#t;3oxTGn1m%fDK^gS7BI1
zrHe)^0dj>TPpCqnQ2(8eVr+47l>k=~OTm4<^`ea&G>H=ftW9a@i3QDh5QJq+I2#(Y
zzf@0<6nf(=?TrAPo~ETn#ngDP1$53)G81AAe>9(ZD^Fr{ydqd>q$`Qz@(Q>Zq!TJF
z#?|_O+T<s#F%ZV(!C$TBc&BS0=9-6^8bmyRh@z2E7XS#$o;JSnJcs=}pM(5fiNYoq
zWZ`~QGBY&1FCt=8oGWuT;gYNj=iGN21Bz`A_RZ*=APU5JN8jfFzyVrgPN{2j_*kMJ
z@?`9`SezUqf0$*I@s0{^s)6-YHbjtjM!Zc!G4tsB<;zHX@QV__ea=JK%V%9jLJmr?
z5)u;fj2Ss?x=K%4*nHlAvs7q<!R1_+w{MlCwsz{%2HowEV1@ai?4Qpz-<2x=E0pFt
zf;lI2`ng7k-FxHrb7a&%HY!$=#=(2`;_xUG@l#^#`CvY1c6x+Z^yec05wKX$-iu2Z
zH9L$>7kOS^hMsm0Sv(-{qM@&Wpp$Sh1%Q6ryk5gm1PXYX#|=0%eAPuE^YzhYw*gzp
zWRTP9ch01kVVTUIT5A*K+zSwxzcok=>XHX3ZzQ526<a$1XFsSo9!AwtIKu6E`<qJf
zQvic32s_Yj44S!<#A}y6NYwm0Cb&-r+y-DxgD=~lYqX5q2Ycla82|k)5MR8&$Y|bH
z2HH8DyvM93y3zmIC8s-!sQ?e*y9^Mh2j{&`@?1f74;2=4*<<#1Qkf$5Z#V0g**UGx
z&>vtt<cS&_z=GmVc*E)$^uJ6r9zRCNdK__(lQD(BYJW2~nsr7`+Kra#`3-WHO)-<<
zeNWBwT#!N*?R-05;J_<zJw6(ie+v)0U^V~aJUBql3VCBa-Lhj;zZVSVMaLydUvg=y
zbs``Quw~FFwd!2lhOCUSJIC9D%$f1$V))VBp3OuQ@vpv*6Ivj?2#0TVp6Q_8!S<jf
z9DMOhWMl~ln3DN<-KF>~&~Zg2hh)x(<GA1eQu|-i4{!E4-eKdO?j!@l5G_2OJAwZO
zN7xR@55%l<MB_OyA3Q}ubU+^2GziT>*v(Qrt|PO`F9=!;L^pyQHm0q69zDXYnG6>2
zPfw@$@k2fpP78AK#M$2Vi{R<=IK0%2Q3rkYVlnB@KLHkJhEW(h0b^n#_$1zsolhaK
zSpSuqUlf&k^Dj9T*$?z|;5g(Shy?@8wD@iVKq?SA1)$TyaEB8VY8svvaNmb$AYlO`
zxWr+#|A(GE{j+CO=$`TX?%D5=s59dNjyzzVVD5LvsQLNx8n_MhcFe)xCD3pdJ|hNs
zQ6~|LZLwg789>=X7GG?<UOlWCIByv!^7a!GMPtxSId2+|U9#qTQolv8O%(7~L5$==
z@V#{|pka(TN)Hak2IHcY{5m)Hc}R_t2Q;(~x-I`T8!6^UT36p$2yA;Tja+g(MuvC<
zcu4+UkLUhck4%KhAJ9wAWA-QF8G;2_3&VqpgLBJ}0%SB8ch4Jx?gC^e{Q>Mh*-&I%
z-MDc7y>F+%y9b}HyemMDa%WU0*q6=pjGAi`X$ZUqBAYjs6dpf*8A#HLSOD_Ar|)B+
z*TUbe%tc!H{-T3V);Ty{2q1%F^9Z?{mn5=uyx7q{PjNB;9Z}2@)`&QCd*+yx1+654
zF%F1{lLiESkg4OTo}1wT{By8#WN-jz0+4tiK|!Vi;GvqFya+lJ8?dNA3}k954GvhU
z+jCcqjEz6kAj3lbiqC-c9d^F}0u8Hq>B$=frE4I9C2^+vjHo`cI59nNL^6L)lr4x*
z-MMoGScz7*wtR|<IoXKs0$bQ)b@kU>U0OQ&8uh^7C9etXf9CO->c4skkEpsdC**Y%
zlx@Cmyg$k@&z~2vun?WG0_y^H!|Wk?12BN*4A*Q?A!i^4nh?h0lliTEKD3Z=iGjoy
zU^__tecP0FITaOuNSBkxdFF1z@%zK);9x_1MPUESKL6|dhQ|EsUmxx-vV8JiWb<mX
zHm@LXHHUsKCOrVNeqTTM7M;a_c+~zs{`nraj|`t{QtEIxd2HJ*p;yM*#Kf8qMMX$W
z<wel)aaS%Q^IN2!uAgk0?99k~WDeudYw_^)p2;aT4+8NO3>me+-F&O3?j=*?nHe*V
z-q#l<$er?)t3=LRy7J~~0?`$k;qHxropW(7yywox=uFSWxbi2_eN2pUb#fi%o7?B#
zEIt8sb&(f-;z>c|zkj?$-A@Ys@e%Up|9t%42j%~*F%iu(Dm21GT6wAGTYw1vX?WM6
zm`?@&akmM>MyCB;l=ImxsS}j%`hNX-hkSv-rg)u|cn=5O32HZaBcF6hp|1>4Undgf
zJmVgs1sOGkQ_lS6l*qT|V`A$izZ<-vp*RVDi6%nP7w~Ni{}MvJoGXOKy<NMC@!&PE
z*%2YX5IptEs&v5WzaFx#^ZS>7U7uV3=F*A43=AAO6C0b)%RZ-&+q_|APc{7I(&B^u
zgO&vSB+lQBbYy2CIY}&obO9u-DR)vk3DN?=Q_v`4htYL(Z-4#KlfYJQ_l74Jn75yO
zkjFyC;q8eFuO66|h7tujqucNB&r#~tYWnK}j(hh=e;Tn<Q(KkBYZ##$qFAULI6gk^
zJzR~x_O0a~JrdCu5}dq^;T29FA&wr<khdSIyFL@<6aDUi)gQmFkAx9OgArKn%aa?%
zK96+zPQZuia6a}p!>j*?Ys{ePRZ)D)RJw~Sa-HVU6pZ%z50muAzh|T=^b&gB<9_$E
z5?_VmG+X3JLDAB@yv|z@;<f^}kn5PL(~rboe2{+)pLz?>{C+6QpAC)v-B4eEf%hDK
zLawVhh>fk3{H{a%d(C`W{qvGoxFi(=#}`Ps0Zb)q$_Mjx0lDyAoZ}lkEiG#BTICy%
z|8Ab<^FQXzpBv`-(FsZ%TwG62Pg?;t<e5wY>3R%L3Zm;Dpx5aqi$9;42+vH0XZrd=
z0fPZX_9-iFS|jAj>COVTG($~I%}zcMbQf#tLjE~Ckq=;ayiW>JQd85=(rRmtt$xPF
z-g6$&L|<O}1CRaGDIaaHDF2Ulcssp1{_?%N$h@mNa_!g;$?uAE5up$_T00UCL(hh$
z>mS{fxJ`2M4eW*JbVcWUWLD$fBa_E<>D7bh%2h1vPD)w7XLUn}1KHdmX1|yFrt<54
zoRB+b+-ul`goK#EKd|&gm_Lb=5Psv%-8{3=E!~B6`Eo-?M@Nd=(C=%y|JYV{f0|&5
z!otw>2K>vzG!|7AjcV7*WVi!HYv&KiG&!Om_~LF%BLjNlbMgJLW8~Vr-GAM}I6co}
zF{UXG>7e`l`bnnf#YJmq6e*YeY!Y+>iDkmyJ;)IGXAg|L;qf983{j)cv1$-1%*Jou
z46;;90iOjX33XC?Ba{}wItQ&8JKe^QTKqO;Rk(GCO7gWT{roFP2)z=R?Ecv%g#sNR
zL6)l+Cku$l$o$sU)@C865A*j@NNg#P=_0*n&lE(?SEdvE2z>*KKZTQCi?{nLm=LaH
z@w6*Y<uK2AZ{62^T39Ms79LEht*w0)nFk!)J!k$lD8vldwM<i9n^{>P&3hto)c3ou
zv^0N6Fl&y}caYh#CI+p1+gJ)0cX)UheCP~Omk?<rTKFIt2U2^xi^%TTfBGQZ^$jfu
z=ff_c*9#)cn~+c3H^pHc+#!WKiG7f#d;B5b>+5T3p-no}6ESBees|Q}2BzO~I!3?e
zNWaI|*Qk&fwIhHFOpm5zlM(16;ozl-D0(j5#W{<jhvA*VKt7e`bDjPD3s1E%q@O){
z^k{P@H!vuu&2Z4aUhAs=!&8VLluMSqC7di9U6c)L11P&i(&P;1wWH8CHKZj0xeh;?
zqoH_%{$ws<+5|IN;{wLZC;58cV`t~)V)BNYh~X!1W2QFtZe6_)3R27zGJ^tOouwJ!
zqn9bAsg95vC3^U}MEN(*{nv*z&LGa?^T9f}b@dsPt<5Jw#b+T8jD5(T6s*d?IT;m0
zO${6F7JgDda&oeK+wb#`jkmvJ5iKwTiNE>i(V`b~Y=Q}<q9`=28)!dBDl1(efs;jB
zqf|9W?!zyyOK{gu?|yCU`TCYsH($kNW@g3(DKNP@e&Wjov>547)e*A3j&5aaptFG)
zdfEk9LG+3}#=va#H{pPrR(3+E`5m3_mQQ4QNCjRZ2VI9~qf9d#kA^K<l9G~N$Hp|V
zu&}<u$viGag>G0Rb$`dfZxJOC;cVcFUI^}KFkftMV5^SU+SxTWN6;Hnn84jIBFp4H
zT!pC(1Yt|qAQpli_wT|SY@FzQ@wWe)&-7oTfY*=nNfvg-#q{iKKFDp<+FN&q9)8nd
z0R~k#e$K<0C!Qup%KPj!3?3l~348bx%Kt-?Zah3e84?XiaI@fj)NP4;2$e2A7Zp8J
zQ8CsjP@=Vf`?`O9n)x$2K0Y8XZ;g<G!oRb#laPqW4>lK6^*Q?)13hpxT2v(Bzx4`5
z$zMWEzcm;CS1?Cd&}5{i|9lCa%oq9RC%^x?2wK8_`22?8|HY5rvR^va-z8T)W1*$h
zMgJe3?k=no_#Zz0A7%VM49fpo>h=Hs1`1~4Vu&FKxuBpR#Uc}>&&9=$jEz;mGb_Ro
z7br=iEeOvLO!@fJNK#t5p|8(AAUL>wcGe&uAV4@x&ToADIa=`k-4M-@+Zd<uB~?_M
zY#<F}eQNL9%!c?8eDD77W>}LjxFVrIi162ZLloRITs(~ns_q~f0tbhY=HGWg-o+P5
zYG@=6EW+Y_lU?qDUcC5%Kyd<RFw6R0#dG9GQpxgk^_{7YCclMV_eO;6->;h6Admk|
z(&2%h%a-v8L)7(&7{*o^wX^V3gLlsS6s4*;Me4V%>Qyd+I*2GGH8p~g(#-__yj?U2
z9BPKZ%NYpqm$G^{P~l$JYYE>%A!0K!@<B3FD(PwoWMLB$a*_IAV-sHeyD7*!TCi~}
znnAFo$SPhVBWuxHq{sJ%^EKiKc@7-k=#wk2QjW+^Ypscpn3(0pKW~s2c2aOG9Nb1U
zj*gD$ru0!QkMH3Bb+vI3bqy4j2A+hF6aQ?s#RE7*xaUCr9UT>daN{<0%2N!`$}<pz
zy9?6&pg)-<?~Uj|kHHQ>j{3h}?oi(3ByD!4@xv??J3Sqin1LeDFzU6K#naxPpYma2
zk-Fxu^IJ$rhUD_!*COv&LHCkwCen|`HHK<(McImXMDi5bNZ}jGpNVQG32`k~$7=28
zKV+blsK2juH&hP9uxH@otIX5;K5sY(rJeG?F7QSM`kgwo9$K-`o11H@QvSjenng%T
z%0~J3<;XiD78jRSMg<f)5)wtr+kSpxxfu4B_2Vr?pkh{0kvc<^_Gp#MS>%SYji3~g
zAxpsZU#&qF#@{b@U*B)UCz#@La;`NWBOgy|!nH7Q#tYD`K=>GapT92<6o!85!BFEa
z^du;$C;&YQ28M+d^ti-qI0im{&h+<>k#~rSy0D@_5+j*jlyiU$pN##I`Yy*3BMCYV
z`ya~)ri3*c)&Rg*j2D9Wwxg4gTcGvf)Ku1<EG2EUf{T3k`*j<wy=P|9!>Tb__&s~I
z$XBf}<FB>y6hCG1!96H3#Dwq5tE>QlK~4^X=ZU|r{{0_OW<-&HRrhhgDo-(f`=%}O
z@pL*&C=6V-%y;#F{2D`);*7hXl!k`6jm@3RZ2DtloVi?{uto+2>2~(^8vofsur%$b
zgYP3MiA$mF6uPMFMyfoWREsj;xv1l=egEeX`!3Wx<|HmI<eZYgo-VXK<BmLkBLm%@
zAYVYBM?%H&KSs{|svHI;gq(r&-Bf9h0xqaIh>I<i{H}#u{P#-~8yar|WQicEOw~?M
z!Z$SsU^f>|A-7##=J@A?xQBy2^%c>0T7EAN{I(y9x<)iepZ|Ud^4tRJ+t}DR*qL8L
zMF9iZXrC;ar>qcf!6Oxwa+raCf4%cX>|szP!Ek1Li`<LpSUj!kGnSqa#~*jzK%5B0
z&JI;Ys&o-pi0-fX@|u4=VsZbmkf&iK$T1`xe~D_%aNR@pq5CUN_PBpe_1iu06I@+@
z69I%j4$`LcbP?jP+yV9v@>^d&<IkpgK~wYK_(0YM8*+vF+346#<jTKa9Ycr%=B`Rn
zEBcniZ{_KJM(Uz%=f8h62NtqiR%PYzU%ydh=>6aPrm!%(=-!sZ407!aeIt=ShQt~f
zlAfL(Wfg`9@w3R<2?_b2)cPaf&jCrt!09?TN4X$_+(<CB$pHE9-><GOoDx*^EHMF8
z$Y*TPe_T(=_rKBo{^#Sr$ME+%!IS?pCja-w<df#W;2_$z{pT~rGzy7NgoyN;aH#J!
zD>OLFm_kvlp8ENp#wp6#4M&G4<P=<+O$~0qcH2GHGBFwYL_M)RXdc|cSZ&g<otaZc
z_hO~WZJ-DWpwt804i88Q31TE^AiV}(<6t6c0xxM-xchrrb~Za;26?qniF{5IOXhBm
zgvh&d)XD*enB83jq>A-Lrn!EN6mCQQ4wsMSl3Z~zpJm4uEsfQBuDw>M=(6}{tKl!M
zo1nDFJ2di+;JR(=oBILX1*oHZ<GPKFjgv3WZGVNB$U<aAnwZ=1!0h5;d|qXyaeaX4
z4rH!mX;fDgRe@8){uou<2yFL68qoJxBZe5sqGi=02rs@*%mj-N@WrVoYq;sIUSQQL
zeg5U_A159(Vk{gqS-J6M`dr^Qv$ES|<>fL**gD3>5VM^JnEg)xM!ziC>KUAXR50dN
zJkWEyn~&4?y9EyI3h*(^Mk=@&Dpu>bRw|?{+qh@GD(NR&gFH{c#UTg(<hC%xFMfw>
zMfcCXyW@fIVyk3y9uF$n?2?dK;Mhl@CVNzljaBW(&j7XBag(gRWr{~V5N0avKxOIW
zvM2>&4!5fqvD#NEqW&q&;pWnkCn!5U=l7d9@05=QUS!~M8!_8}IdaNU%%jdJ)hj>I
zyY>}N<}2v*p!>J??f7dP)VUKISXp(U#qdAc_qG<yTDHt~H`m^Z$YV0QsR)IJ1iKN#
zngXErUeGrIoixt{g}Q`jJpX)&7CyU<5!)G|ppFam>gUcgZXnBUdAJ-so!G9cp6{R0
zPEIi%r<Op?s>$Hv-8X=$*vRUIB80{jb5h3~z&2s*eRyYQ$Xe#!W{1$)G-oxpqm$F*
zPPN;eqxoEZlIz#6dv^=|oc|p}_{ZY~Jz*+iyY3bbu`E=9!dg81!f6Q7tXa30`U_}*
zumTSV`>a)6w#tD)-ON{#=E=^BobqL!GwubuFjge+ZNdFJ)KK90KaB~9HmMm?b0-yW
zSCpYd9zB|TO`j9s1J$#+&1VXd4pk4n2sjHIEw3#5!@?s%DP${O%XJ!Fm>3*A+D?hP
z4~mA#z~|e4dF%XLP}}t~08b<&BilMDHfPPw&0T<D@jaG34?GyK+5;YuJKS*HYtf+D
zCI;9w%xMV|hdDpv_R1&)P;h-=W?{+KNotge<EX!=zUuK_o^CB}^nk|oa6yCdTPs7^
zYzma~djk2kscVxI$6PctG}5RS;24>Vw{G*B;akZfq)76G-FgqwT0^;@v?}Kx`WoUY
zM;2+q(qL|k?I`R;nU4o6B}s>i`j7_L+qhIbs&022L`D%)h_U)4Y2VzkUpMM|-%*=g
z6)VV-W3L@lw)tUu$(YAQJ(JN-<9oCf>fpU(beZ!<y7*16pnDsfGP_fZI}L@s>Ldbt
zO)}Kf6M*jv02_uiXfMBoL11dnZJISHNP@A_reV9c`Y3-FveC(LaRv4}tA*|CcFvpY
zZ_WQ)D<3`FR@xZBh4k@J=<ON`aXhw_v}qh~DF7_jjAwjFub_Xozui^2_{Z8QiV}o%
zqDojjLrg#+EG+Dpr}ruF;1xs0f=X&(p>4zA@-QmXzTIgA&uM2lVMn{_*BglmZHjX4
zHlBqn@U_O}x!KsTL9I7ZjpO~^Nf3~X1(Ac5<Cn~R2hGZD8@6*@w?>f7BE3rpJOiQ?
zTiNE>8+Mb2Yk}s@+R}|1DFl_b%u03jVYj~mziIjsVEFydQ8+V=Y~^I8$kQc^*;dh2
z0jRD$x)HV>5$_9UHfm}p7Kjh;Zg80NF-`76WmkVF?F+DoVg8K95y)*zI`~C9smqAs
zEWl4cI@+lYhQV%Gn__fx=$V<Y8EyH;ZbAMq3}Zj}HU=@_=YM7{EIaMbWlRR~Rx!;C
z0^4|QJ;+rhyU{Y+g^3h@hL7duFw_9v&nG&zwavC~L&YzZ(XPLVs<?5qmqhWJpnA8S
z^}-Z2HCQyN7PWh82`dM=B}e=E;$8cw-nNq9r<u<ZdaNx*9A<vHERvCt6_9K2#YpNk
zn36IQlaQ0=I8nH*)0#WBHSX;9R`Y`()>kdAtmIp+cC(|-?H0MG0Iosxt&a-zU$6y8
zb6u8<^}~<Jsz*24M@dIfBga8-oH>sK?Hp{h2SYY%wI!Sr^^i?^P&Va;iwkV6oui`^
zD^8=R30Ox@D>l;@vz<yK=oNZgjuf)#?#*c5zIvgcg0WnBUNMN^w(G1A#cOld4HC=F
zhXmhm9sB#jwEIgil-__0W}iGrYE&{epK4xKghMExvB33k-`74}7HZg6%M~9mQiEG_
zYONOAl?k}CkA=<6SH#G^TvJd*uUlAUxrv4FqX~z0Cw1q|RNe`@YLw}a{bV5RR<Tje
ze>g2ZgZ04{ffo@u?7Yz^z4yYrWV}IXr}AKm(RkOgdg`vZA8Hvz(XMpGeh4}^QZoP1
z?xBQ4%NyrJfuptH-r<qqVLoH3NlUk*8S~6?mz5EX`feF)_9g4BI)W-DC<B{Q_R5o$
zpH!y+fb}zacU|KAS=+d-SM7Z_M@}^Mj0M{lFB(RVmU<_z<?g0F+}SVR9>D&(z0@23
zLsub75qD>_nip0lM+OSwBXEx#`$>{fd%37lkU<CEN1d0vq72Q=gJD}F?rvrXup6J(
z=7U@q%dMX)L7<g<IST!6M;ezDXb0)*vAq@P%iEB54N&-U=z2A5CB!u~>;h`aXovPP
zh{^=sV{7mbaI38#ave;9n|t@%R-DQw=Ku#?z7lIJt=d`yGN){CrDSqL>QMD?O5@0f
zdvxWeLNzak*^s^R4r<5kI04$8u}yU|E)d{n+LkUB&3f99>~CEr4JMuQvUO5Iw=HZv
zoG1;~{`i~%z&qjL)3}0s^7Ch`+6@mrWIUP}ZM5w@e01D_-fG9y38>2jAFDRb9hI`S
zV%gsEke|CniO+;{^_rT*ryP%Kei7e^Rq|hiX#_l0=nZ6k+-dOR>kXO-Vx`mu?;Jwy
zo4!}5MISqcJ`drLgo;!7pHx@K(wUf;D%9Jpll0qWRN9~qr86JfCrSQoYr8K|V&E9a
z!?umgtAd5Ol;{M<3ekeg{-#-n(@|%zS-&2aD%d-a7sA3}IuI_`-qd9Hzv}u9u&B;%
zYfSwTqee|cy3r_NBS;ZMKqHC>!UqT_RUHrkVWgL#nD{A3jRJxNP!SP^D!mLK%8Y`7
zNM|U@(1+dz2AH|)nE&4U6TS1~F@QL8&U@Z>@3q(7d+kj7J<`&;^9?zcdUgDc=j(N?
zR=X}H`R^~Pn%99iNeIW>$Y_JE+ETz#n(=OvoMTFRcI*hMsDLVd1XGj~5#Mg!?=o7(
z=NbA*qU7$U05OHlP{!Gq-|no1O7iKDrM4W~^@3)Xc<EDXbWWePUC44DY1{Fo)IR&p
z5-&5q`Cd1_Xy{NeP;GT%_M%TCl3Ed2o%!T0#lc7GW%Ht<q6iU^{sKO4frV+=!M63P
zsm{Ee86|tYIiuzoU7tcMmFofr@9Vv)B}ZkI+BK$N8E`0t*ycs9wwVi%g9y#8RV}WX
zm5lS;T;x8o;mdDFC9p)HK)01>9_@O+&_JVvN9u0dX_R`5&3U;c{Gu&?P}g4=mtxDh
zvyUvUA?l<~SCWRS4Vi&1ptMlGT?l0cL!lWfz7^dF2OoUs%IZMh*+FrS4mabdrGV99
z!Yc5z^@TdB^F1Lm0pi|@=>^?YXq`C(#!A6&B3PrlCqg$&O_gIt=SkkXRIz8i)N8b`
zA9-(anKR|(16}?Hr-vGqA8X&%x8{%e^rx7_CzO;NNH68y8R(>Gi297bAE-|v-}C4!
zfZ}U)OIb>JrG|v>uj{U>oA?3&$#{<crPzPZg;k@>-vT&xmlbKCb6qb%=gD5h8M+8L
zwRvps|F@Msepw!;F0kqClbj26n@PSC-IYugPQ}%gvQ21@Y(B%G03E8MO@W@rB$uhA
zm+`Jen%LUf-t*%Qc=F~2-4|$`1x_UN-%*5^xY@~&nX}KYoloWWNUF7NnYC-nSwnge
z_?!gSVrqw#h1LeAvQp4ezqi2DasF&<jYrGbfb*$k;}ui4n?K|+@v%9!+0`ok#FCm}
zbUFG(OB0Rs_1BRYaf0h5Rim7=t8eWly^fKQSJkk#wifm3c?ogEbH|rL_jLwN)t23_
za#EqpYAd0mE`fxeh!gC5T+tkTU+LPbSFhSSK-x7hyQWI?l-J?}V?OH>yYytsipvKR
z^bO0~s-i3}a@wn-GhUvmt**AuTu>P=zp}TfIo(_Y8ZlEl80KERQMkT5<``!r-)41)
zh^mjL$w&(+{MDQf@xWCVFL@_)QLXk0Vb?oFjo?5!zrG`{OfoI=TN-k$QQv$ci`Oy6
zGo^FiC2A#TMW@@w<5{&N#ucNFp#btiDHqFtGE&;J9~=&7nmeGYGIJ8`Hk(LHh#(3<
z0x-GzwDNDg7-y?n)iU<@ZfW$oGjoQJFn2<C<$~=DsuC3!hO-yn|MQs(H2gsvp3`N1
zzI5+=NArBjDE9HKER^VXp5d4_%Bw7nKWB;>o0tgK9+0)o?;6AGcSWOgv)e{6CfDnA
zly@g8_$|(bxL_cG1SgQ@4R1_pOfh5*yD%N{ty6KZOLhA1?IT;zxj4@2WzYMFdbB%f
zglu#=)zc%_nig05-TG}8vuO_>Zr*l+I~L+Vqj1tEyc~-LDa?y}wk7{gRw=Y&48rin
zWjU&^toFuH(z!N#3>?v-b2HCA|G#f4@1hsoyE&aHA<&X-QyVga0@H7byAbYTpDj-A
zYz*`5kIfgUj5GfEKBuv~?8EZ_n_&(RzH4|36=S=Mm^M|BQa7}>)enK{O08GIaOuh&
z%(i^8grJ4zp#$jVLxFe&n%f+;Z%-bDSd}lP$G<n{-lp`&dQeBE5Nn>C*fXS`;DUyd
zBRDLvogQNQhhv@ZN%`!(aqPw7{1k+tu4Y}Rt2p)4%86bp-)t5!A&MpszfXhcp@YQX
z^x@6h2(d?)`CX%h)bB4bGtVBr(m}@56_gaFxer_N_owL%&u<AoAdDknI|Es!?at13
z)YV@gp|S;9h|i~<Zo(M$bGXB@C5Q8&T<h;+p>r8zlxEV%y_Z3o_4b)<wUHlUB3f(l
z=<+4b*F?oi=@-MT+1>B7_-@fYeXwZ}b_>|Q_Qjn?Fip8}_H>D-UTB{kwC3sF=qt<f
zc?!W3zm#`HZX#-mpKLj|k8bOHEl-X_I}*Hssp7$IN|SAh-fh}+hI1D%-H4i+8Uo!g
zI|iCIOZ0}ljvP4x*$?WV+NIN{QIxxH%jWLxVCfpg*$IY37io5=TDrO6397U8=-!|}
zhFm)hbd=;VuHYow35)48^=2PKws!Gsw0GytS5_y{P{bsEsJJS`Mo^Vj=e75$iJzgS
zrfse-^oV6uDNL$$^@dN(!NHO51iliE!oE1~*J^ED=~3!p7~4-9co>}WL!I|XZZmsH
z^^Tmaeu5v`e1*p3cT%~{lw$W0;WwpS5RDXKv*@A0fq~CgE6b&&VR;~CWUM?QEaII3
z7h{p&XZUpk+--qQzj^lg6A*I00M*crEci2%a5V(T`RroT`UPsT`ewZZzgT6Dnp4ud
zcXuRrg}!_D4z5{<i8@vGVzQmiC(E68g4j6P@w~H9&rTYfyBUU7H0>=Md@Mq}NI~>u
zCvTjjBSsym2doo*lMBEbG6UCWr0hQM_Ce_RF2UU<KTY+$(V}w3$}E2n+b?I5bKypl
zg4<9798Z^RbIV(b{H6Ci`Jrg3P13iu=?F0L*^AJztXCYke}y&vJUoza7-)YBJyqyz
zO{~81EaEuF(3-l(C+^xUOb^t#6gOkIL1*J^t3Uq_AvVmj^3sBynb|!fH~|A!cAjpm
znq;i&Qwf6QUiP}Y|3@I^9oRtO*sc3WrWi5SeN7}iW9FW*nbVP+i>-S}OyD>n%wc}h
zVx*^cBdZhM-XSjIboO~D8yO_n?}VDnDG4QKt6WmRDv`D)v%ENp-yI{ZU)N!Hefard
ze|V~q2DbeGO<3{LnOxu12gb{f{kqO}CZ%E}8`D@-5zj4p5uSMC0ncN^#fo|loF)G4
z5n@NmczJo<i0`ticJlJ-drzlvI*Z$;JVx5Ai^t9myv;CV_5*ReK4l3mONZ}B<O5lh
z$LW7OS$3PmHx02pg7@nRd0df{iwm>)Wn!2cVi(#kEN^!bjaRvbd1`a-YpEAa3ohx=
zxrnZF-nj6_1JqKviAz!C>07mKSq&2m&&7q__^6)&4RjLPI1o@%AYC>C_^r3YA(OGL
zij4L4T}3n25R)fnm*uzick!3HWSds5T*-E=L4_1uD(T+6$-$0dk85L96?4zlIEKL`
z9nsX(q!(WMLCLDRE8dT5OIPhEa%1+*i2BV1Uci_1Jnd%zhK0jVt5Zf~-G^I3W-#B}
zC&_<b%J*Uire4dYh#^d0pu07jM^6^^-LcpILg<qN_(X~D$5Y7fRR&1t)V4rlHUhed
z@r)%-7gUl#D|Ad$TdHnAvyl)}>-cekVMujeOg$ZMl`7%-_D~%-%n%36Aq&kS)uv6*
zY6u5RL#@2iJ55PLrP02-{y)CCyRR#eBcrBP)<nYM+1NFVB}QAc4RY$=Qlc<@)1!T2
z%rI|_u-x|5N><0{c`#p%T%Rw$`5{m;e$n>;e5F)8LxOJ@MMCOsJ@#T%OH+<*{ciu-
z7?~}kc(k55T-(YUwo#)-(}tTfETQ)Fv}%@`!OP#l87BMREv%2HX-4prNlQ(p<P$4@
z?l8d=OGui#Opy7r9g&2C5F^p=WgRa2G{z5Y6kjWFN>A_h#Fugw%}`fVU@}64*2~)P
zc7tAGoLiimKxRFB0DoZ6uPV~8bult5mLjL!;oFH0Ot#lMeR`(2hZQax5V>{Tb<deb
z<9ELce7i<f@v+X*Cc?C_7Qhxzs3q6H7Jn!JRq}3V&4J&3DMh3<GD#r_K1EiDOs=pC
zKK;nv+o^e75JIs^>Z(o8G)5;+=y&T!b*b^*L&@lJmv$hT^Rt`!??3~D?j5h{dv5&w
z6<PjaO(Ub};a1s?z^1Tw?B>mzAMx#&8jn@8QQ_jL<7wc$A%X9I9pk1Om?peY58W39
zPONuBP|de7qm1MVG0-$$2}LybBsB`qiYKJ|eo5<0F{F9|VL!wpGi+y#Jp@Z(J2N>s
zY0{x#Uiz8UG+eJGAa@jxFbEPW(xp?e)RbX@2FKX>lOe+LI~-{<8o8<rY!Bgm9j*pF
zJv{_EPBqEhv0800aQ8^O&m;#bULmQe)2WTP))&)*5_BvPz>)MrfTB9|fWwUB7F`3p
zrX#*thdAJO6VuH%2x>{*vET!ju$SuUu4A1ls0Vc~T!M+O_B00$vV`iT3Up(H*RF-t
z^8kVR+^`0hdM8G8DPiMYt4mS7MhMoSblg73DWDEF;-RyMfaB^)!K3&90s{Tu#e{5+
zmyAPOj!AqH&=)|RkeIT&c5yRd6|hus&?EZ;VvZ<tg>G8qf4<{r+*NRR*JlE-NHCm<
zdEn&{jZjRwfG_99_;Ek2+^{PI3w#u_&mSU`$^E`5^?GV*>Rc_qWGA8!zTi&d^bo*c
zn2&HAh8+w<oa=#{J2!P@eYajb5Z(H}q^SZ#5j&FzE4p#G!-0Vn-(Nli&tEXmkZeFN
z?8GD4F$SH?&pfv%;Muw&a0m}GGk^1&PB3+UxrnB9T_v8~Tg%g@y)er_1{&aZoqX`P
ze%Sa{?VBG4;+yi|XyNY;ho-Z*Y;vGp!cjvZ@s_97)fZZyTAN_}LP_W0x*@yg*H+cR
zPrg<=dE(B+!kXC;s$~RpGPcC|aR+xW{lUr0xA-dbSYVDDM&mlFFK+oY168i_!XD38
z?Q5F92Rbut;{BC1Rz9<!cCO(+5%f6jf?BieH`a~{UXwi`%`-g_WwkA8H;$=iSg0fz
zXT;e$AkYaWw)=b>#7Q7sLa7$V1>4<S5ya=HZVxsk)6$;B(SW0091%2++3<4X+B!HA
zMYdJSo(KT};TED6AXS!?nq8Ax=WFJ_v`V?R_=kTwn713PPk(V=hSGCGqZ`OI$ZBuv
zrha}Wr&Iz^GFN!2%|3&1bE}qJyFbCimVddX;jDvrC{B?1xp*G9o<^n_ghq7GE_(i=
z*0zX=w};p4`?wh3vfkv1Pa*1j0V{9X?}F;u><PRbIa?PUw+heseYNotaM#u*OK<jd
zg($i7H4J$}bcgjyQqr+`za#cqoImfXNq8}Mw}eNJ9^q!Is;U%+GuHw;Kipr79kc=X
zz!@RYnIxZ2vnIkHLpjcC+1eKab)<9j5Furie`V(6$n7b3UqR64q1-aOwG(f?zqx>a
z9`T8dnOCnN4C3hoUK!X~Rvy!l>ckftL1-li)+;T4zI1W2I%EcLkWLR35t+6SvCHtA
zy4ytu*PkuS@gIK{&+zIGWsWYW@E508;k7EpNm)3M5Ny+V@^q=)h0&zAD;rxhOtJgr
zsWQI~_YPe+Q6kbMj->F6w6t`1@SdWALsumC5hw@&lPAD<LKBHdIH36D{A&!$N%H&5
z-HNQZTrU2BI63&RKr}ADxUz<K01N8TRtUYVbr2H!H%2GqR{fYyBoM(XZy??eyVYu#
zdh=C}!r}LEUVXO_Dj%&xJW3tT1{quc=gq=H3l8-E>L<U(YpVuVcvV(b3ia>Yek#gn
zr<By277uI;LknX72~mvkl5y&OF$Y6W@D`-9ii*a@bPqp2>HxBj^gLWbrUgggcB<+2
zuCR70F2mZ#ee-6&MV18PwoRN6>_qBh3Ce=P{g;~kLxCV^olS$xXg}pJrM?zO_L;!Q
z8#4WyQd@}>0R2ILc;1_G%r%H+WS+GQx8zMm8`hX&TVRlDNQS?!CjqP!9CuZ<kQ-C9
zYn{2AOH<iiRZ>ZGWRce4iVZCwAgR^;5(o#jSl>E6rPLH3-}TE_0wR%(@<abo?293h
zCVO5n+rweOpeG$P!QyXSy?@|6<_+3~_GM&zN~s(qMPBGCJ^XHOd7Lfsi>5pttnh5X
z!dQ#b*Z}<hH1e$A?>2z9gAi-bb}6argvZ;nC+x)CAmq*@;_)puXgyz?97OyGLm{-%
zAaMx^#}pNK5nll8HQ`9SF%V3$K$wRB*ETND#M~P6>auMzURE7{(Z%O!LjPT5gS18a
z0B0t;%xBlpP~j*e1P}xXHgdD}?BQX<B%RoE(*yOSc;6xoxCnTP7g%+~>#tiraC~0=
z67YhzuqFf!@F>t?!u|W3hyadAJ`kU5Kdn;r2vyZia~}c-QtZc_M!UkHwX678m;W1%
zs>i?*u_c@!n{$K_MnT7}6C&9^JqHt`&s7HfT)fEHiV3i*Ra`v@)@#4}@J1Xx8HnFQ
zZaVxNx*h$tuMjx%Ewi4_TyD3@<Bkbz8h*B@+b5?0={xO3<Pl%B%))*Vrtsno7`Ybf
zIkN0>V@HYGc1z%LM;&irOd{IMSyNp-huo!l?FS*zk+$6GmVF3g-t6PQefS9m6<Bp#
zV3R;`B8a3)rT%;738iBtQ;xeVN?JbmyF04a3A~LV7){_d(l5)e0pDHzMpEF%%SWj=
zAkbxBk1h3-XsB5JI(TKhz`qVAL}+hgAwhH<{os2LHl07T{I~GkW%J(wS;|KT((*fl
z2u?*wXIli3#)*-&afIdA0s{O3u^`J|m(7C&4hpzyA;t>^9bW(Y^1mj&D-PYI_32Lq
z1eD|OFF$<=tAlg4+FQtcT}=DxbLG@;?+?kQl8t}hF;lOnEidBv_-^+fIIJE;{Kb^_
zGrnd0kBX*`ztLjYu=OR`<6lI&<{ahI$0X1abx~{}`q-~2BiY4>5I?=hgI55)8o!xu
zlpn}Qd0&1l(z^OHZ*zu$#sBml3n+s%`^=ApwKv~r+1;1A<_m$(y_w|yaV5upU02*=
zHiJ0*Gw(V4)o0)A!lmo#=b~ds8tXoHf#rM7QodMppBXO;4BVFY>88SFsqEWSX0`V;
zl~?@bip!t-Txa*BGi7(Go~C`~FEd#nLq7fa<=Fezw|@Mw0=quR5=7s1Q(ihbLbB|q
zwQDm<xst&|tHb}k%EdMQzGt*wMO$!V#ny52bCH<*W%Fi`{UU2rTr-X=FFrUEe$)D6
z|Jvo)wY>aXRbOspVzeKlVtL6}rpDU8SA|l59(CKKYkY^MB;B%al%)Unvx%?dB4G!J
zS4&&ZE9uI`d6#p%#ljg?&IBX=Cx)0u#Vr=DMy9W}toh+TKjG!mj|-4#!`%NDQhbfZ
z{G7uT{LPzzWk}DKKm8VxeAZXxarYgV?!aYJyBQ+;90POh%d`jUi`?$Mtf@)QcS*M_
z+XF+HG7=pfEx0gTzop1y?B~KlB@7LDcq-?@p;XiS^k+>Ew}IfF9;}z1?JOpNA2*h>
zZ`x&)Ve#`$<2~WXajKvFF!W6;8~8qHgcbC2HT1`wi~HWx)`qVZ+kcdqH}Vj+=KJrB
zDpL$C)ipIIbc*w5N0ikUX2mwEmAOG;LI!_%<j^yyR_W<w^uGc#h{Tbj(jGV_RP8hj
zaJ{DoevaMm7Ajq~E9B}*wQzXcriB@68ygKqSge5^xUY#y!JQ?;s9W6kn?J8TM$O+5
z7hHSp<2wJ(ADIk1q2aaZMMGR5?A}`}C71JzE#cb723<yS`O<gb;K}`FneV6IHR7!<
zR@c;ofot9g6Ah)gLZJoFNOVAx?&Kst5!`!MvVGQWg6eCtwPB$8IZr62z}7&oWP)x#
zfk;~2%d1tVwg1_bvJE7LMT`-^o<x(>U%x3UD~BnM{%4NcyhitQb{be-IY^xK#>kMk
zs|%rZyNH}rJ?ZWJD|=OUf_PS4ay2ShoSe#X9qjg2>W3sMYdE{Cu(trwlViz*vd{wL
z5oA&L@n?&D#_SDPAD<1K-t17wEE?x22g+>jMomUIIN4tljS#%SFE?7aqjL0a%z^pJ
zKt(5N+46mJrj}qzr?D7D)}G9;2E?u*Gk#06!N^zNywH?7ufVVY6REo38g8Gl<OiKe
z%EWZNuH2jnc)9~MilmE>pf_aZV_K6__w^*Y48vy&Qg@@?t7Kk3@|xNp^}vluHO(KD
z@muUQ9A%wH#w?V0Yl6{U#F`Lpnr43ZM3XXt5peJcVCM);o62Bm)#8qRmC2VR{V>5j
ziwDwx<8|(N^??DK`%745CCW|ok&ls?Kw5s+t=*>j{r2o;a#_x}8ny*T_T#qTTdZ7u
zx8>rJ@Ry+-$mQl%n^lj0*wSs<RrIuNyeval;i4zh+8wW?S7x3Kpr5u0rRvRfH6ixs
z9-@+iENI-}x4E?O3i1(mcX!(B#zd`rq{i7PtN2WluF@s^QkgNi`BKYSjRtQTU`Y!|
zkCl1s66_d+;n9(8kx~%`VcFT)EJ{~#+R+dGruN8UnmJYG)}?n?xE1BygD&y=KgnLn
z%P$$*Ig<$kEN2%W=B|zrk~vK*Fw7tv9?;`)nsbzZxni8}#m7q|#rwI_ryM{<^wliM
zVepBVebZ0phh=@{0u{&0pDFw9hRvHD7Q>uv3wj<-RV6A;EFeZ58Kc6EXvs<5zQowJ
zbLXDIo~Pa`84D?>i(t=e_zk2>aKYjvb<2%ok8-0TBVXW9oa?RnS%^~tYvc54YqSGL
zetM*s993IY<YrHr=suF=Ju?(C0u_?bEn$j9HT~jBlQB7zIC=J%RBl~D?R7k_$DzQO
zfy70;zAb^EFE}AJ_2Wa1Kome_yE;H|_E1l6uh*wpvrMMlx$iF1&t=fsG(h#b4!o7w
z?=iaW`L)nM<bfM))8*}(UI56Lv3SkqoGUGqu`tsxsGFaA_b5r9i!zx+%*eY_Y=T4|
zxSLBDq%4^TilMe(;GtIi?@dTi=McwJ#~fUG7D@Vb=FzK&G&xX~vis2-xOMH8qx9sY
zFwO5UrJ*`_z0O=eDsMDripFrbgJf$qnv$nt{kW|+ASa|xM5ze2!v^d5MTr;{w?085
zUd(c#Z9K9R*>u5$QKlLmlz9dl!*4{_s7z;{Dsp{w%Y@zJ&~3@<4H{_4GC1Ca+8LF{
zI=<3D!TTDy?S})z?>LvtsF3{>0#+%@IkYn*bi*a%eGUMy=QSYCXXVt_1buj}@o3rs
zyeQ=Se*=zwL~m{^<ClZvxI!EF9~=4KU$mqVnTM;y9-N??3iq^QT!Qv@fIc8dH1+iL
zOL_~)$kYJ1CrwKM(=*9@KMaXadQ*6z?$5c2aB`>wZ(L3P_b)jJ-$0;fp;qu>Qd;Hx
zL*K$BB!Bqh>#wO8Ttn9Vj>6mp=xfQ_yA@dRuMJin0}le4DFW}W3i|EDwX?0$-A87F
zuB;KiX%w$GvCsC9C#Zpm1_NF7>Ra=5xP!<%OondSanRWwQi_2_X_E&3FW2h<r;-xM
zg#tGnvnLc`Ej6Uh-T=sVs**}T`G&tS)rAAUhNM!Q{@uOS&Q(yX_Lp^NC;T$_QK>Ww
zJ-xM%8nc417vn=fxVEkGY|DB(QGpovOBUU{n*a*MPryYp0@rFBiQdz3jw(9meM9@`
zF4MeUJN+ofwPU$)mCMoQnfz#=iJ^21VRITvCh6PZOwtkc+}6h*OZ9Zssn-!g&-n`2
zpFzeJnrjT%oiv6HjY0NdMMkm^1%@Bk`wIz{2w{%>E|Z*1iMOz?Hf$?UDdo*P2Lomy
zm5aihHEwZZh+}lAwD~^%3y{}o&aY7+^Y2s(+Wy2Qgj56X5=~>%&-T0|)!PwoxqFeE
zjliz})pgp;@WZQxHe5H^MizBzaFSx+VV#>9`ZLlbU^OL46ztNTZMuF=cc)6nD;_~!
z??ke%yqt?EJ&d*;<}puHP*4zao6A^V1FfvOh*JsS(P#!NXmGkYTMflYI5Punxu*Br
znhG|m@g@n+wL$#9x8BG9U+%agaPacTZ;tJiIGfxZOCw|nEp{{2cr22Im^4plM}8~p
zL{cN-wx{)@(vp&r``w1_>6>Q0&)&Yv%sgSjAgT1Ok;rdn_}+zi@TwbCxc3N~o527?
z89LC9jhHAZ8S%<<zPCSL=`oUH7QQoAbGYLl0-Cvt#K8qfdDH-$BZerYwXZ<l{(FqC
z5R%Fr9v&WmV=)<-@mpAR47dLBDTz^I``}Mx*nNJDc;!%Ij%@?_>_oD>LtE<6W~8cC
z$Xt4VKeCN@0N@b3(E4=nOXa2M?0TNcIgK`Q*$OA_ppB{LvLz63w?DCK#oLW1Po8`c
zq01|(n$4~e7Hn;8m5+mZeNLMyx|4%SQDcz2v^3@)Tp29*cxI$QN<N4D>Sm>UQ5eYP
z$BmOyQyy(5qL<2_+2*cM!ys_BqC?xa5P@%tY%{*{erV`naB1wi(gN5?&xuN#1l@Q)
zw>xCQkm3gF({oEoxc3W%WL1M)YLwKrijv>n|C03X(RDD$zZ|~yxKWjR!6cOK2eE0V
zw}-A6*ufMDyY#(IubTt^p<XpZEHHm5-+*iN{ZIFlIrYMC%DiV%23oV5Z?V)juf@#}
zpszOu(Islj%_H^is`}a?8(adj^vuEs&BT|ltrjaaz<I#wSRvy&FdnmiM&<7Eg(`Q{
zM7nW1fzODI{?vDRz$IlBZJ|<nlwf=V13_xfD=eG`ZfVI9Of-LPpu4n<#7Am=_Xj&*
zERfiz6Bg{69W!!FfJ2pib}L}x{M#h$@gJ^h*AnLDm82}&w``5_aNt0bLwsZ##NU5>
zW%abiWp=1hGR>$y^EosQVW~B%<a6z!B(AGJG-__hw&BXd0O*9$Yho8{@faTsJAkA{
zwHF-5W6|2%vdUFe`p?(kq=S$>aPw6alB%$+qOb@}7kB`{k5!VG-^1vl0z8<=r1w&$
zQFTg@K7i=qYmjpd#=MSRT8y0SIasJ>wigm6>)=n;gB8(L%KvA$=x&Utj@R5>xzfJf
zV{Uw{X~h@&Kx*ehZ1;rF0usg?w(E&+MK4`4aTt78sqAn9fZw3X2}Ts;P)&;m`|@+K
zWH+|LL@nRv{P7W#aI1jv&oiGI&DQlk)tO@}(crlV-=np1Ydd93r}3JmW136<9x29M
zg`ZIa`nA09T{HxJsHjcw041Ad$P^Ckz{#&G^$qxlhU&Srg;CQ9c!fr9hwP_M-&Opp
zInC5~B)f~S@@*OZOTifLGxhWfM3M(#Z1uxD)aNYK0kple@5sq)6&R=XFSoUqJ5Z)|
zdA}m8_B%U7gk~B2FRSf^0TrE1P;GQXc|?_&%iP)P`RXQrr38_h5Ty)X$5~xbhtv&p
zC_@7Su}e<TiZ<Qab^0enlfUO4BImjR;v6wDYP!V&he!tz%@~Qx*NSeqTm<usIP1y8
z+@F6+zq3O~MKfA)*>cq|YHobfMjvEmZrUpFn`DxvoI~3#IBy4+_BsuTcxTAyi^9qz
z=c|aw4>jbJzjjE|s(<{ZyWK@vJK1--F2|d;4JdYDk^If#2Ib9*87YNj-j2%;K}+nv
z1ipHbh{<Y4sYdfsxkPYtZ55k6B6?kY^PbYVcQ0RQ`ku%*m35#geaShg!yZrFAgnoq
zuMyLQ{3;60CUkGS{Hy3Km_NceyN<N&z6Ln)_yk2Q4)r<U30p_mO5K483B*IqWr#0$
z;lw#|+W)TDlg@b3IH!FmV1C}gPM%@RDMl9OR&%E6bNQTf1%XTB?=uobbz`{}G?l|B
zkqSx(+rKT1r^cT;9!08A^Y^JTi3E}~&{g@+yFBW}U6wma1En|AT$hZyWkeZF>>rvD
zWic$pQMGe|%AW|=9m`pGjRDbAKwVXOXz{OM2PR`eKKNTk9s9N0-cm%oYiTs}Mr<t2
zycrb-#frU=byB(cop;v3#wACiT<-*}3o^=IZ*W|#(Qbl;x8q&87sZPxabjIFF-QL8
zcKU-s1;!7eirbN&Hn78F4ij3cEoW4Ph5Gya9Gl)?X(PH#{F`dUJ|tSMBV5u-UP7U9
zAoL}ri9W&QFLw$KqTK^{jgOH4Y)%Slar9`f<0B$OP&ja6xR}h($wL)lAnHJeb0}|q
z5>Px-&imWOV)zt-!JDVx>45BA&X^;T?nb*nn%;#oh6GlRoB)X&ENBsPlFR`#h#<C?
z8Fd2n3MZ&gaGw$=*FNMcqL7-=C~x)sFWB{n>HhZf1cM5WpnY^kRBoW0!1(olt^!HQ
z!Y+NO_!t*M^r0j*sPa6$U&k&aM-!c<%U_`cA^2|>z)x=zhshp6w)N<0v00*idfUe$
z4&;yoCt$>0=+K%=N~RAMfej|lQ?SVBB3gfL@ZDA^-?lslLE`yR#yVsYJJXn|C~<ll
zqcC#C#IjmXLrer2!{f;+vn^MMWC`vuDk|35OkclPpd5U54${}7?r9$ID{1Kuo?IYZ
zvwul_>W`<YKP$JnJ1w7QQ`|g>%EWL~ENvq($^Hu$QcoMiWR3i}vh-(oB-4>Ynov3+
jm;A#W<32CQ@zlhJKUn<x{D)fNwl$CFsHgva=Fk5E!#v%#

literal 0
HcmV?d00001


From 3be2d928f6f4bd02467e6fe01fbb4d0ecca7e9d5 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Thu, 9 Jul 2026 21:42:59 -0400
Subject: [PATCH 10/94] Filter out disabled

---
 server/lib/ip.ts                          |  9 +++++
 server/lib/rebuildClientAssociations.ts   | 46 +++++++++++++++--------
 server/routers/newt/buildConfiguration.ts |  7 +++-
 server/routers/olm/buildConfiguration.ts  | 10 ++++-
 4 files changed, 53 insertions(+), 19 deletions(-)

diff --git a/server/lib/ip.ts b/server/lib/ip.ts
index 56576282a..fb161df1c 100644
--- a/server/lib/ip.ts
+++ b/server/lib/ip.ts
@@ -496,6 +496,7 @@ export function generateRemoteSubnets(
 ): string[] {
     const remoteSubnets = allSiteResources
         .filter((sr) => {
+            if (!sr.enabled) return false;
             if (!sr.destination) return false;
 
             if (sr.mode === "cidr") {
@@ -530,6 +531,7 @@ export function generateAliasConfig(allSiteResources: SiteResource[]): Alias[] {
     return allSiteResources
         .filter(
             (sr) =>
+                sr.enabled &&
                 sr.aliasAddress &&
                 ((sr.alias && (sr.mode == "host" || sr.mode == "ssh")) ||
                     (sr.fullDomain && sr.mode == "http"))
@@ -662,6 +664,13 @@ export async function generateSubnetProxyTargetV2(
         subnet: string | null;
     }[]
 ): Promise<SubnetProxyTargetV2[] | undefined> {
+    if (!siteResource.enabled) {
+        logger.debug(
+            `Site resource ${siteResource.siteResourceId} is disabled, skipping target generation.`
+        );
+        return;
+    }
+
     if (clients.length === 0) {
         logger.debug(
             `No clients have access to site resource ${siteResource.siteResourceId}, skipping target generation.`
diff --git a/server/lib/rebuildClientAssociations.ts b/server/lib/rebuildClientAssociations.ts
index efb856825..eae579634 100644
--- a/server/lib/rebuildClientAssociations.ts
+++ b/server/lib/rebuildClientAssociations.ts
@@ -1561,9 +1561,19 @@ export async function handleMessagingForUpdatedSiteResource(
                 updatedSiteResource.udpPortRangeString ||
             existingSiteResource.disableIcmp !==
                 updatedSiteResource.disableIcmp);
+    // Toggling enabled on/off doesn't change any of the fields above, but it
+    // does change whether targets/peer data should exist at all, so it needs
+    // to drive the same old->new diff machinery: going enabled->disabled
+    // diffs "real data" against "nothing" (a remove), and disabled->enabled
+    // diffs "nothing" against "real data" (an add). generateSubnetProxyTargetV2/
+    // generateRemoteSubnets/generateAliasConfig already return nothing for a
+    // disabled resource, so no other changes are needed here.
+    const enabledChanged =
+        existingSiteResource &&
+        existingSiteResource.enabled !== updatedSiteResource.enabled;
 
     logger.debug(
-        `handleMessagingForUpdatedSiteResource: change flags destinationChanged=${Boolean(destinationChanged)} destinationPortChanged=${Boolean(destinationPortChanged)} aliasChanged=${Boolean(aliasChanged)} fullDomainChanged=${Boolean(fullDomainChanged)} sslChanged=${Boolean(sslChanged)} portRangesChanged=${Boolean(portRangesChanged)}`
+        `handleMessagingForUpdatedSiteResource: change flags destinationChanged=${Boolean(destinationChanged)} destinationPortChanged=${Boolean(destinationPortChanged)} aliasChanged=${Boolean(aliasChanged)} fullDomainChanged=${Boolean(fullDomainChanged)} sslChanged=${Boolean(sslChanged)} portRangesChanged=${Boolean(portRangesChanged)} enabledChanged=${Boolean(enabledChanged)}`
     );
 
     // if the existingSiteResource is undefined (new resource) we don't need to do anything here, the rebuild above handled it all
@@ -1574,14 +1584,16 @@ export async function handleMessagingForUpdatedSiteResource(
         fullDomainChanged ||
         sslChanged ||
         portRangesChanged ||
-        destinationPortChanged
+        destinationPortChanged ||
+        enabledChanged
     ) {
         const shouldUpdateTargets =
             destinationChanged ||
             sslChanged ||
             portRangesChanged ||
             fullDomainChanged ||
-            destinationPortChanged;
+            destinationPortChanged ||
+            enabledChanged;
 
         logger.debug(
             `handleMessagingForUpdatedSiteResource: entering unchanged-site update path shouldUpdateTargets=${shouldUpdateTargets}`
@@ -1657,20 +1669,22 @@ export async function handleMessagingForUpdatedSiteResource(
                 peerDataUpdateBatch.push({
                     clientId: client.clientId,
                     siteId,
-                    remoteSubnets: destinationChanged
-                        ? {
-                              oldRemoteSubnets: !oldDestinationStillInUseBySite
-                                  ? generateRemoteSubnets([
-                                        existingSiteResource
-                                    ])
-                                  : [],
-                              newRemoteSubnets: generateRemoteSubnets([
-                                  updatedSiteResource
-                              ])
-                          }
-                        : undefined,
+                    remoteSubnets:
+                        destinationChanged || enabledChanged
+                            ? {
+                                  oldRemoteSubnets:
+                                      !oldDestinationStillInUseBySite
+                                          ? generateRemoteSubnets([
+                                                existingSiteResource
+                                            ])
+                                          : [],
+                                  newRemoteSubnets: generateRemoteSubnets([
+                                      updatedSiteResource
+                                  ])
+                              }
+                            : undefined,
                     aliases:
-                        aliasChanged || fullDomainChanged // the full domain is sent down as an alias
+                        aliasChanged || fullDomainChanged || enabledChanged // the full domain is sent down as an alias
                             ? {
                                   oldAliases: generateAliasConfig([
                                       existingSiteResource
diff --git a/server/routers/newt/buildConfiguration.ts b/server/routers/newt/buildConfiguration.ts
index 5b7f211ae..a12d035a5 100644
--- a/server/routers/newt/buildConfiguration.ts
+++ b/server/routers/newt/buildConfiguration.ts
@@ -148,7 +148,12 @@ export async function buildClientConfigurationForNewtClient(
         .from(siteResources)
         .innerJoin(networks, eq(siteResources.networkId, networks.networkId))
         .innerJoin(siteNetworks, eq(networks.networkId, siteNetworks.networkId))
-        .where(eq(siteNetworks.siteId, siteId))
+        .where(
+            and(
+                eq(siteNetworks.siteId, siteId),
+                eq(siteResources.enabled, true)
+            )
+        )
         .then((rows) => rows.map((r) => r.siteResources));
 
     const targetsToSend: SubnetProxyTargetV2[] = [];
diff --git a/server/routers/olm/buildConfiguration.ts b/server/routers/olm/buildConfiguration.ts
index f72731c92..0266fa041 100644
--- a/server/routers/olm/buildConfiguration.ts
+++ b/server/routers/olm/buildConfiguration.ts
@@ -16,7 +16,7 @@ import {
     generateRemoteSubnets
 } from "@server/lib/ip";
 import logger from "@server/logger";
-import { eq, inArray } from "drizzle-orm";
+import { and, eq, inArray } from "drizzle-orm";
 import { addPeer, deletePeer } from "../newt/peers";
 import config from "@server/lib/config";
 
@@ -70,7 +70,13 @@ export async function buildSiteConfigurationForOlmClient(
         .innerJoin(networks, eq(siteResources.networkId, networks.networkId))
         .innerJoin(siteNetworks, eq(networks.networkId, siteNetworks.networkId))
         .where(
-            eq(clientSiteResourcesAssociationsCache.clientId, client.clientId)
+            and(
+                eq(
+                    clientSiteResourcesAssociationsCache.clientId,
+                    client.clientId
+                ),
+                eq(siteResources.enabled, true)
+            )
         );
 
     const siteResourcesBySiteId = new Map<number, SiteResource[]>();

From 0b2693a317ba9dc788db3a44cc40e25423defc1b Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Fri, 10 Jul 2026 09:59:11 -0400
Subject: [PATCH 11/94] Add toggle to the ui for enabled

---
 .../private/[niceId]/general/page.tsx         |  44 ++++++-
 src/components/PrivateResourcesTable.tsx      | 109 +++++++++++++++++-
 src/lib/privateResourceForm.ts                |   3 +-
 3 files changed, 152 insertions(+), 4 deletions(-)

diff --git a/src/app/[orgId]/settings/resources/private/[niceId]/general/page.tsx b/src/app/[orgId]/settings/resources/private/[niceId]/general/page.tsx
index 6e1a9fdeb..d14b9c3d5 100644
--- a/src/app/[orgId]/settings/resources/private/[niceId]/general/page.tsx
+++ b/src/app/[orgId]/settings/resources/private/[niceId]/general/page.tsx
@@ -16,12 +16,14 @@ import { Button } from "@app/components/ui/button";
 import {
     Form,
     FormControl,
+    FormDescription,
     FormField,
     FormItem,
     FormLabel,
     FormMessage
 } from "@app/components/ui/form";
 import { Input } from "@app/components/ui/input";
+import { SwitchInput } from "@app/components/SwitchInput";
 import { createGeneralFormSchema } from "@app/lib/privateResourceForm";
 import { zodResolver } from "@hookform/resolvers/zod";
 import { useTranslations } from "next-intl";
@@ -41,7 +43,8 @@ export default function PrivateResourceGeneralPage() {
         resolver: zodResolver(formSchema),
         defaultValues: {
             name: siteResource.name,
-            niceId: siteResource.niceId
+            niceId: siteResource.niceId,
+            enabled: siteResource.enabled
         }
     });
 
@@ -52,7 +55,8 @@ export default function PrivateResourceGeneralPage() {
         const data = form.getValues();
         await save({
             name: data.name,
-            niceId: data.niceId
+            niceId: data.niceId,
+            enabled: data.enabled
         });
     }, null);
 
@@ -76,6 +80,42 @@ export default function PrivateResourceGeneralPage() {
                                 id="private-resource-general-form"
                             >
                                 <SettingsFormGrid>
+                                    <SettingsFormCell span="full">
+                                        <FormField
+                                            control={form.control}
+                                            name="enabled"
+                                            render={() => (
+                                                <FormItem>
+                                                    <FormControl>
+                                                        <SwitchInput
+                                                            id="enable-resource"
+                                                            defaultChecked={
+                                                                siteResource.enabled
+                                                            }
+                                                            label={t(
+                                                                "resourceEnable"
+                                                            )}
+                                                            onCheckedChange={(
+                                                                val
+                                                            ) =>
+                                                                form.setValue(
+                                                                    "enabled",
+                                                                    val
+                                                                )
+                                                            }
+                                                        />
+                                                    </FormControl>
+                                                    <FormDescription>
+                                                        {t(
+                                                            "disabledResourceDescription"
+                                                        )}
+                                                    </FormDescription>
+                                                    <FormMessage />
+                                                </FormItem>
+                                            )}
+                                        />
+                                    </SettingsFormCell>
+
                                     <SettingsFormCell span="half">
                                         <FormField
                                             control={form.control}
diff --git a/src/components/PrivateResourcesTable.tsx b/src/components/PrivateResourcesTable.tsx
index 8d6f1a014..6c2999624 100644
--- a/src/components/PrivateResourcesTable.tsx
+++ b/src/components/PrivateResourcesTable.tsx
@@ -23,6 +23,7 @@ import {
     PopoverContent,
     PopoverTrigger
 } from "@app/components/ui/popover";
+import { Switch } from "@app/components/ui/switch";
 import { useEnvContext } from "@app/hooks/useEnvContext";
 import { useNavigationContext } from "@app/hooks/useNavigationContext";
 import { useOptimisticLabels } from "@app/hooks/useOptimisticLabels";
@@ -36,7 +37,9 @@ import { getPrivateResourceSettingsHref } from "@app/lib/launcherResourceAdminHr
 import { getNextSortOrder, getSortDirection } from "@app/lib/sortColumn";
 import { build } from "@server/build";
 import { tierMatrix } from "@server/lib/billing/tierMatrix";
+import { UpdateSiteResourceResponse } from "@server/routers/siteResource";
 import type { PaginationState } from "@tanstack/react-table";
+import { AxiosResponse } from "axios";
 import {
     ArrowDown01Icon,
     ArrowRight,
@@ -49,8 +52,17 @@ import {
 import { useTranslations } from "next-intl";
 import Link from "next/link";
 import { useRouter } from "next/navigation";
-import { startTransition, useMemo, useState, useTransition } from "react";
+import {
+    startTransition,
+    useMemo,
+    useOptimistic,
+    useRef,
+    useState,
+    useTransition,
+    type ComponentRef
+} from "react";
 import { useDebouncedCallback } from "use-debounce";
+import z from "zod";
 import { ColumnFilterButton } from "./ColumnFilterButton";
 import { LabelColumnFilterButton } from "./LabelColumnFilterButton";
 import { LabelsTableCell } from "./LabelsTableCell";
@@ -114,6 +126,11 @@ function isSafeUrlForLink(href: string): boolean {
     }
 }
 
+const booleanSearchFilterSchema = z
+    .enum(["true", "false"])
+    .optional()
+    .catch(undefined);
+
 type ClientResourcesTableProps = {
     internalResources: InternalResourceRow[];
     orgId: string;
@@ -174,6 +191,30 @@ export default function PrivateResourcesTable({
         });
     };
 
+    async function toggleInternalResourceEnabled(
+        val: boolean,
+        resourceId: number
+    ) {
+        try {
+            await api.post<AxiosResponse<UpdateSiteResourceResponse>>(
+                `site-resource/${resourceId}`,
+                {
+                    enabled: val
+                }
+            );
+            router.refresh();
+        } catch (e) {
+            toast({
+                variant: "destructive",
+                title: t("resourcesErrorUpdate"),
+                description: formatAxiosError(
+                    e,
+                    t("resourcesErrorUpdateDescription")
+                )
+            });
+        }
+    }
+
     const deleteInternalResource = async (
         resourceId: number,
         siteId: number
@@ -429,6 +470,36 @@ export default function PrivateResourcesTable({
                     );
                 }
             },
+            {
+                accessorKey: "enabled",
+                friendlyName: t("enabled"),
+                header: () => (
+                    <ColumnFilterButton
+                        options={[
+                            { value: "true", label: t("enabled") },
+                            { value: "false", label: t("disabled") }
+                        ]}
+                        selectedValue={booleanSearchFilterSchema.parse(
+                            searchParams.get("enabled")
+                        )}
+                        onValueChange={(value) =>
+                            handleFilterChange("enabled", value)
+                        }
+                        searchPlaceholder={t("searchPlaceholder")}
+                        emptyMessage={t("emptySearchOptions")}
+                        label={t("enabled")}
+                        className="p-3"
+                    />
+                ),
+                cell: ({ row }) => (
+                    <InternalResourceEnabledForm
+                        resource={row.original}
+                        onToggleInternalResourceEnabled={
+                            toggleInternalResourceEnabled
+                        }
+                    />
+                )
+            },
             {
                 id: "labels",
                 accessorKey: "labels",
@@ -643,3 +714,39 @@ function ClientResourceLabelCell({
         />
     );
 }
+
+type InternalResourceEnabledFormProps = {
+    resource: InternalResourceRow;
+    onToggleInternalResourceEnabled: (
+        val: boolean,
+        resourceId: number
+    ) => Promise<void>;
+};
+
+function InternalResourceEnabledForm({
+    resource,
+    onToggleInternalResourceEnabled
+}: InternalResourceEnabledFormProps) {
+    const [optimisticEnabled, setOptimisticEnabled] = useOptimistic(
+        resource.enabled
+    );
+
+    const formRef = useRef<ComponentRef<"form">>(null);
+
+    async function submitAction(formData: FormData) {
+        const newEnabled = !(formData.get("enabled") === "on");
+        setOptimisticEnabled(newEnabled);
+        await onToggleInternalResourceEnabled(newEnabled, resource.id);
+    }
+
+    return (
+        <form action={submitAction} ref={formRef}>
+            <Switch
+                checked={optimisticEnabled}
+                disabled={optimisticEnabled !== resource.enabled}
+                name="enabled"
+                onCheckedChange={() => formRef.current?.requestSubmit()}
+            />
+        </form>
+    );
+}
diff --git a/src/lib/privateResourceForm.ts b/src/lib/privateResourceForm.ts
index d9f6fd691..86c6228cd 100644
--- a/src/lib/privateResourceForm.ts
+++ b/src/lib/privateResourceForm.ts
@@ -342,7 +342,8 @@ export function createGeneralFormSchema(t: TranslateFn) {
             .string()
             .min(1)
             .max(255)
-            .regex(/^[a-zA-Z0-9-]+$/)
+            .regex(/^[a-zA-Z0-9-]+$/),
+        enabled: z.boolean()
     });
 }
 

From f4bee6406a23250fd5f64fb6cad44c5dca1959b3 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Fri, 10 Jul 2026 10:11:47 -0400
Subject: [PATCH 12/94] Support partial updates

---
 server/routers/siteResource/updateSiteResource.ts | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/server/routers/siteResource/updateSiteResource.ts b/server/routers/siteResource/updateSiteResource.ts
index 173a15190..e1e25f918 100644
--- a/server/routers/siteResource/updateSiteResource.ts
+++ b/server/routers/siteResource/updateSiteResource.ts
@@ -152,6 +152,11 @@ const updateSiteResourceSchema = z
     )
     .refine(
         (data) => {
+            // this is a partial update; only enforce destination when the
+            // caller is actually changing mode or destination
+            if (data.mode === undefined && data.destination === undefined) {
+                return true;
+            }
             // destination is only optional for ssh mode with native authDaemonMode
             if (data.mode === "ssh" && data.authDaemonMode === "native") {
                 return true;

From 538b57941c114307528098a2ef4c95e07c5a3b50 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Fri, 10 Jul 2026 11:32:27 -0400
Subject: [PATCH 13/94] Makes sure patch works z#

---
 .../siteResource/updateSiteResource.ts        | 30 +++++++++++++++----
 src/lib/privateResourceForm.ts                |  1 -
 2 files changed, 25 insertions(+), 6 deletions(-)

diff --git a/server/routers/siteResource/updateSiteResource.ts b/server/routers/siteResource/updateSiteResource.ts
index e1e25f918..0ccf29908 100644
--- a/server/routers/siteResource/updateSiteResource.ts
+++ b/server/routers/siteResource/updateSiteResource.ts
@@ -416,8 +416,10 @@ export async function updateSiteResource(
             : [];
         const existingSiteIds = existingSiteNetworks.map((sn) => sn.siteId);
 
-        let fullDomain: string | null = null;
-        let finalSubdomain: string | null = null;
+        // undefined means "leave unchanged" (partial update); only nulled out
+        // when the mode is explicitly being changed away from http
+        let fullDomain: string | null | undefined = undefined;
+        let finalSubdomain: string | null | undefined = undefined;
         if (domainId) {
             // Validate domain and construct full domain
             const domainResult = await validateAndConstructDomain(
@@ -453,6 +455,11 @@ export async function updateSiteResource(
                     )
                 );
             }
+        } else if (mode !== undefined && mode !== "http") {
+            // mode is explicitly changing away from http, so the resource
+            // can no longer have a domain associated with it
+            fullDomain = null;
+            finalSubdomain = null;
         }
 
         // make sure the alias is unique within the org if provided
@@ -521,15 +528,28 @@ export async function updateSiteResource(
                     destination: destination,
                     destinationPort: destinationPort,
                     enabled: enabled,
-                    alias: alias ? alias.trim() : null,
+                    alias:
+                        alias !== undefined
+                            ? alias
+                                ? alias.trim()
+                                : null
+                            : mode !== undefined &&
+                                mode !== "host" &&
+                                mode !== "ssh"
+                              ? null
+                              : undefined,
                     tcpPortRangeString: tcpPortRangeStringAdjusted,
                     udpPortRangeString:
                         mode == "http" || mode == "ssh"
                             ? ""
                             : udpPortRangeString,
                     disableIcmp:
-                        disableIcmp ||
-                        (mode == "http" || mode == "ssh" ? true : false),
+                        mode !== undefined
+                            ? disableIcmp ||
+                              (mode == "http" || mode == "ssh"
+                                  ? true
+                                  : false)
+                            : disableIcmp,
                     domainId,
                     subdomain: finalSubdomain,
                     fullDomain,
diff --git a/src/lib/privateResourceForm.ts b/src/lib/privateResourceForm.ts
index 86c6228cd..3edd436e4 100644
--- a/src/lib/privateResourceForm.ts
+++ b/src/lib/privateResourceForm.ts
@@ -165,7 +165,6 @@ export function buildCreateSiteResourcePayload(
         siteIds: data.siteIds,
         mode: data.mode,
         destination: isNativeSsh ? undefined : (data.destination ?? undefined),
-        enabled: true,
         ...(data.mode === "http" && {
             scheme: data.scheme,
             ssl: data.ssl ?? false,

From cf9a17cc2ef6fb6f292e0f9379334d8afb12cec4 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Fri, 10 Jul 2026 15:03:50 -0400
Subject: [PATCH 14/94] Add status filter

---
 server/db/pg/schema/schema.ts                 | 10 +++++--
 server/db/sqlite/schema/schema.ts             |  6 +++--
 server/routers/resource/listResources.ts      | 14 ++++++++++
 .../resource/listUserResourceAliases.ts       | 26 ++++++++++++++----
 .../siteResource/listAllSiteResourcesByOrg.ts | 14 ++++++++++
 .../routers/siteResource/listSiteResources.ts | 27 ++++++++++++++-----
 6 files changed, 81 insertions(+), 16 deletions(-)

diff --git a/server/db/pg/schema/schema.ts b/server/db/pg/schema/schema.ts
index b207b423b..f3375b0d9 100644
--- a/server/db/pg/schema/schema.ts
+++ b/server/db/pg/schema/schema.ts
@@ -200,7 +200,10 @@ export const resources = pgTable(
         authDaemonMode: varchar("authDaemonMode", { length: 32 })
             .$type<"site" | "remote" | "native">()
             .default("site"),
-        authDaemonPort: integer("authDaemonPort").default(22123)
+        authDaemonPort: integer("authDaemonPort").default(22123),
+        status: varchar("status")
+            .$type<"pending" | "approved">()
+            .default("approved")
     },
     (t) => [
         index("idx_resources_fulldomain")
@@ -451,7 +454,10 @@ export const siteResources = pgTable(
             onDelete: "set null"
         }),
         subdomain: varchar("subdomain"),
-        fullDomain: varchar("fullDomain")
+        fullDomain: varchar("fullDomain"),
+        status: varchar("status")
+            .$type<"pending" | "approved">()
+            .default("approved")
     },
     (t) => [index("idx_siteresources_orgid_niceid").on(t.orgId, t.niceId)]
 );
diff --git a/server/db/sqlite/schema/schema.ts b/server/db/sqlite/schema/schema.ts
index 4ec4916b5..3fcf38a41 100644
--- a/server/db/sqlite/schema/schema.ts
+++ b/server/db/sqlite/schema/schema.ts
@@ -209,7 +209,8 @@ export const resources = sqliteTable("resources", {
     authDaemonMode: text("authDaemonMode")
         .$type<"site" | "remote" | "native">()
         .default("site"),
-    authDaemonPort: integer("authDaemonPort").default(22123)
+    authDaemonPort: integer("authDaemonPort").default(22123),
+    status: text("status").$type<"pending" | "approved">().default("approved")
 });
 
 export const labels = sqliteTable("labels", {
@@ -447,7 +448,8 @@ export const siteResources = sqliteTable("siteResources", {
         onDelete: "set null"
     }),
     subdomain: text("subdomain"),
-    fullDomain: text("fullDomain")
+    fullDomain: text("fullDomain"),
+    status: text("status").$type<"pending" | "approved">().default("approved")
 });
 
 export const networks = sqliteTable("networks", {
diff --git a/server/routers/resource/listResources.ts b/server/routers/resource/listResources.ts
index 9567b5bcd..e0baa49b1 100644
--- a/server/routers/resource/listResources.ts
+++ b/server/routers/resource/listResources.ts
@@ -138,6 +138,15 @@ const listResourcesSchema = z.strictObject({
         description:
             "When set, only resources that have at least one target on this site are returned"
     }),
+    status: z
+        .enum(["pending", "approved"])
+        .optional()
+        .catch(undefined)
+        .openapi({
+            type: "string",
+            enum: ["pending", "approved"],
+            description: "Filter by resource status"
+        }),
     labels: z
         .preprocess((val) => {
             if (val === undefined || val === null || val === "") {
@@ -451,6 +460,7 @@ export async function listResources(
             sort_by,
             order,
             siteId,
+            status,
             labels: labelFilter
         } = parsedQuery.data;
 
@@ -660,6 +670,10 @@ export async function listResources(
             }
         }
 
+        if (typeof status !== "undefined") {
+            conditions.push(eq(resources.status, status));
+        }
+
         if (siteId != null) {
             const resourcesWithSite = db
                 .select({ resourceId: targets.resourceId })
diff --git a/server/routers/resource/listUserResourceAliases.ts b/server/routers/resource/listUserResourceAliases.ts
index 4ec87b8bb..100b1624d 100644
--- a/server/routers/resource/listUserResourceAliases.ts
+++ b/server/routers/resource/listUserResourceAliases.ts
@@ -45,11 +45,12 @@ function userResourceAliasesCacheKey(
     page: number,
     pageSize: number,
     includeLabels: boolean,
-    labelFilter: string[]
+    labelFilter: string[],
+    status?: "pending" | "approved"
 ) {
     const labelsKey =
         labelFilter.length > 0 ? labelFilter.slice().sort().join(",") : "all";
-    return `userResourceAliases:${orgId}:${userId}:${page}:${pageSize}:${includeLabels ? "labels" : "plain"}:${labelsKey}`;
+    return `userResourceAliases:${orgId}:${userId}:${page}:${pageSize}:${includeLabels ? "labels" : "plain"}:${labelsKey}:${status ?? "all"}`;
 }
 
 const listUserResourceAliasesParamsSchema = z.strictObject({
@@ -96,7 +97,16 @@ const listUserResourceAliasesQuerySchema = z.strictObject({
         type: "array",
         description:
             "Filter by resource labels. A resource matches when it has any of the given labels (OR)."
-    })
+    }),
+    status: z
+        .enum(["pending", "approved"])
+        .optional()
+        .catch(undefined)
+        .openapi({
+            type: "string",
+            enum: ["pending", "approved"],
+            description: "Filter by site resource status"
+        })
 });
 
 export type UserResourceAliasItem = {
@@ -130,7 +140,8 @@ export async function listUserResourceAliases(
             page,
             pageSize,
             includeLabels,
-            labels: labelFilter
+            labels: labelFilter,
+            status
         } = parsedQuery.data;
 
         const parsedParams = listUserResourceAliasesParamsSchema.safeParse(
@@ -172,7 +183,8 @@ export async function listUserResourceAliases(
             page,
             pageSize,
             includeLabels,
-            labelFilter ?? []
+            labelFilter ?? [],
+            status
         );
         const cachedData: ListUserResourceAliasesResponse | undefined =
             await cache.get(cacheKey);
@@ -257,6 +269,10 @@ export async function listUserResourceAliases(
             inArray(siteResources.siteResourceId, accessibleSiteResourceIds)
         ];
 
+        if (typeof status !== "undefined") {
+            whereConditions.push(eq(siteResources.status, status));
+        }
+
         if (labelFilter && labelFilter.length > 0) {
             whereConditions.push(
                 inArray(
diff --git a/server/routers/siteResource/listAllSiteResourcesByOrg.ts b/server/routers/siteResource/listAllSiteResourcesByOrg.ts
index 4515e033e..2cbbc2c4e 100644
--- a/server/routers/siteResource/listAllSiteResourcesByOrg.ts
+++ b/server/routers/siteResource/listAllSiteResourcesByOrg.ts
@@ -86,6 +86,15 @@ const listAllSiteResourcesByOrgQuerySchema = z.strictObject({
         description:
             "When set, only site resources associated with this site (via network) are returned"
     }),
+    status: z
+        .enum(["pending", "approved"])
+        .optional()
+        .catch(undefined)
+        .openapi({
+            type: "string",
+            enum: ["pending", "approved"],
+            description: "Filter by site resource status"
+        }),
     labels: z
         .preprocess((val) => {
             if (val === undefined || val === null || val === "") {
@@ -283,6 +292,7 @@ export async function listAllSiteResourcesByOrg(
             sort_by,
             order,
             siteId,
+            status,
             labels: labelFilter
         } = parsedQuery.data;
 
@@ -315,6 +325,10 @@ export async function listAllSiteResourcesByOrg(
             conditions.push(eq(siteResources.mode, mode));
         }
 
+        if (typeof status !== "undefined") {
+            conditions.push(eq(siteResources.status, status));
+        }
+
         if (labelFilter && labelFilter.length > 0) {
             conditions.push(
                 inArray(
diff --git a/server/routers/siteResource/listSiteResources.ts b/server/routers/siteResource/listSiteResources.ts
index a9688a9c6..c97900bec 100644
--- a/server/routers/siteResource/listSiteResources.ts
+++ b/server/routers/siteResource/listSiteResources.ts
@@ -47,6 +47,15 @@ const listSiteResourcesQuerySchema = z.strictObject({
             enum: ["asc", "desc"],
             default: "asc",
             description: "Sort order"
+        }),
+    status: z
+        .enum(["pending", "approved"])
+        .optional()
+        .catch(undefined)
+        .openapi({
+            type: "string",
+            enum: ["pending", "approved"],
+            description: "Filter by site resource status"
         })
 });
 
@@ -110,7 +119,7 @@ export async function listSiteResources(
         }
 
         const { siteId, orgId } = parsedParams.data;
-        const { limit, offset, sort_by, order } = parsedQuery.data;
+        const { limit, offset, sort_by, order, status } = parsedQuery.data;
 
         // Verify the site exists and belongs to the org
         const site = await db
@@ -124,6 +133,15 @@ export async function listSiteResources(
         }
 
         // Get site resources by joining networks to siteResources via siteNetworks
+        const conditions = [
+            eq(siteNetworks.siteId, siteId),
+            eq(siteResources.orgId, orgId)
+        ];
+
+        if (typeof status !== "undefined") {
+            conditions.push(eq(siteResources.status, status));
+        }
+
         const siteResourcesList = await db
             .select()
             .from(siteNetworks)
@@ -132,12 +150,7 @@ export async function listSiteResources(
                 siteResources,
                 eq(siteResources.networkId, networks.networkId)
             )
-            .where(
-                and(
-                    eq(siteNetworks.siteId, siteId),
-                    eq(siteResources.orgId, orgId)
-                )
-            )
+            .where(and(...conditions))
             .orderBy(
                 sort_by
                     ? order === "asc"

From 609fb357bb1e2ec26535c202181beb4112d70fa8 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Fri, 10 Jul 2026 15:16:50 -0400
Subject: [PATCH 15/94] Support enable in the blueprints

---
 server/lib/blueprints/privateResources.ts | 6 ++----
 server/lib/blueprints/types.ts            | 2 +-
 2 files changed, 3 insertions(+), 5 deletions(-)

diff --git a/server/lib/blueprints/privateResources.ts b/server/lib/blueprints/privateResources.ts
index aa146679f..7d5d9a874 100644
--- a/server/lib/blueprints/privateResources.ts
+++ b/server/lib/blueprints/privateResources.ts
@@ -240,8 +240,7 @@ export async function updatePrivateResources(
                     scheme: resourceData.scheme,
                     destination: resourceData.destination,
                     destinationPort: resourceData["destination-port"],
-                    enabled: true, // hardcoded for now
-                    // enabled: resourceData.enabled ?? true,
+                    enabled: resourceData.enabled ?? true,
                     alias: resourceData.alias || null,
                     disableIcmp:
                         resourceData["disable-icmp"] ||
@@ -493,8 +492,7 @@ export async function updatePrivateResources(
                     scheme: resourceData.scheme,
                     destination: resourceData.destination,
                     destinationPort: resourceData["destination-port"],
-                    enabled: true, // hardcoded for now
-                    // enabled: resourceData.enabled ?? true,
+                    enabled: resourceData.enabled ?? true,
                     alias: resourceData.alias || null,
                     aliasAddress: aliasAddress,
                     disableIcmp:
diff --git a/server/lib/blueprints/types.ts b/server/lib/blueprints/types.ts
index 5495a2d8e..cc9865533 100644
--- a/server/lib/blueprints/types.ts
+++ b/server/lib/blueprints/types.ts
@@ -470,7 +470,7 @@ export const PrivateResourceSchema = z
         // proxyPort: z.int().positive().optional(),
         "destination-port": z.int().positive().optional(),
         destination: z.string().min(1).optional(),
-        // enabled: z.boolean().default(true),
+        enabled: z.boolean().default(true),
         "tcp-ports": portRangeStringSchema.optional().default("*"),
         "udp-ports": portRangeStringSchema.optional().default("*"),
         "disable-icmp": z.boolean().optional().default(false),

From 14680df160dead2fc2aae1259327f24bcbe314a3 Mon Sep 17 00:00:00 2001
From: miloschwartz <mschwartz10612@gmail.com>
Date: Fri, 10 Jul 2026 15:23:09 -0400
Subject: [PATCH 16/94] suse tiermatrix in server component susbcribed check

---
 src/app/auth/org/[orgId]/page.tsx             | 25 +++++++++++++------
 src/app/auth/org/page.tsx                     |  6 ++++-
 src/app/auth/resource/[resourceGuid]/page.tsx | 25 +++++++++++++++----
 src/lib/api/isOrgSubscribed.ts                |  9 +++++--
 src/lib/loadOrgLoginPageBranding.ts           |  6 ++++-
 5 files changed, 54 insertions(+), 17 deletions(-)

diff --git a/src/app/auth/org/[orgId]/page.tsx b/src/app/auth/org/[orgId]/page.tsx
index 2329d5b7c..b2a225120 100644
--- a/src/app/auth/org/[orgId]/page.tsx
+++ b/src/app/auth/org/[orgId]/page.tsx
@@ -13,6 +13,8 @@ import { redirect } from "next/navigation";
 import OrgLoginPage from "@app/components/OrgLoginPage";
 import { pullEnv } from "@app/lib/pullEnv";
 import type { Metadata } from "next";
+import { tierMatrix } from "@server/lib/billing/tierMatrix";
+import { isOrgSubscribed } from "@app/lib/api/isOrgSubscribed";
 
 export const metadata: Metadata = {
     title: "Organization Login"
@@ -68,15 +70,22 @@ export default async function OrgAuthPage(props: {
         variant: idp.variant
     })) as LoginFormIDP[];
 
+    const hasLoginPageBranding = await isOrgSubscribed(
+        orgId,
+        tierMatrix.loginPageBranding
+    );
+
     let branding: LoadLoginPageBrandingResponse | null = null;
-    try {
-        const res = await priv.get<
-            AxiosResponse<LoadLoginPageBrandingResponse>
-        >(`/login-page-branding?orgId=${orgId}`);
-        if (res.status === 200) {
-            branding = res.data.data;
-        }
-    } catch (error) {}
+    if (hasLoginPageBranding) {
+        try {
+            const res = await priv.get<
+                AxiosResponse<LoadLoginPageBrandingResponse>
+            >(`/login-page-branding?orgId=${orgId}`);
+            if (res.status === 200) {
+                branding = res.data.data;
+            }
+        } catch (error) {}
+    }
 
     return (
         <OrgLoginPage
diff --git a/src/app/auth/org/page.tsx b/src/app/auth/org/page.tsx
index 70ea0611b..77aec68d9 100644
--- a/src/app/auth/org/page.tsx
+++ b/src/app/auth/org/page.tsx
@@ -19,6 +19,7 @@ import { isOrgSubscribed } from "@app/lib/api/isOrgSubscribed";
 import { OrgSelectionForm } from "@app/components/OrgSelectionForm";
 import OrgLoginPage from "@app/components/OrgLoginPage";
 import type { Metadata } from "next";
+import { tierMatrix } from "@server/lib/billing/tierMatrix";
 
 export const metadata: Metadata = {
     title: "Choose Organization"
@@ -83,7 +84,10 @@ export default async function OrgAuthPage(props: {
             redirect(env.app.dashboardUrl);
         }
 
-        const subscribed = await isOrgSubscribed(loginPage.orgId);
+        const subscribed = await isOrgSubscribed(
+            loginPage.orgId,
+            tierMatrix.loginPageDomain
+        );
 
         if (build === "saas" && !subscribed) {
             console.log(
diff --git a/src/app/auth/resource/[resourceGuid]/page.tsx b/src/app/auth/resource/[resourceGuid]/page.tsx
index c3f604476..dafc13f8f 100644
--- a/src/app/auth/resource/[resourceGuid]/page.tsx
+++ b/src/app/auth/resource/[resourceGuid]/page.tsx
@@ -27,6 +27,7 @@ import { CheckOrgUserAccessResponse } from "@server/routers/org";
 import OrgPolicyRequired from "@app/components/OrgPolicyRequired";
 import { isOrgSubscribed } from "@app/lib/api/isOrgSubscribed";
 import { normalizePostAuthPath } from "@server/lib/normalizePostAuthPath";
+import { tierMatrix } from "@server/lib/billing/tierMatrix";
 import type { Metadata } from "next";
 
 export const metadata: Metadata = {
@@ -70,14 +71,25 @@ export default async function ResourceAuthPage(props: {
         );
     }
 
-    const subscribed = await isOrgSubscribed(authInfo.orgId);
+    const hasLoginPageDomain = await isOrgSubscribed(
+        authInfo.orgId,
+        tierMatrix.loginPageDomain
+    );
+    const hasOrgOidc = await isOrgSubscribed(
+        authInfo.orgId,
+        tierMatrix.orgOidc
+    );
+    const hasLoginPageBranding = await isOrgSubscribed(
+        authInfo.orgId,
+        tierMatrix.loginPageBranding
+    );
 
     const allHeaders = await headers();
     const host = allHeaders.get("host");
 
     const expectedHost = env.app.dashboardUrl.split("//")[1];
     if (host !== expectedHost) {
-        if (build === "saas" && !subscribed) {
+        if (build === "saas" && !hasLoginPageDomain) {
             redirect(env.app.dashboardUrl);
         }
 
@@ -106,7 +118,10 @@ export default async function ResourceAuthPage(props: {
             const redirectPort = new URL(searchParams.redirect).port;
             const serverResourceHostWithPort = `${serverResourceHost}:${redirectPort}`;
 
-            const wildcardMatchesRedirect = (wildcardDomain: string, host: string): boolean => {
+            const wildcardMatchesRedirect = (
+                wildcardDomain: string,
+                host: string
+            ): boolean => {
                 if (!wildcardDomain.startsWith("*.")) return false;
                 const suffix = wildcardDomain.slice(1); // e.g. ".wildcard.owen.fosrl.io"
                 return host.endsWith(suffix) && host.length > suffix.length;
@@ -228,7 +243,7 @@ export default async function ResourceAuthPage(props: {
 
     let loginIdps: LoginFormIDP[] = [];
     if (build === "saas" || env.app.identityProviderMode === "org") {
-        if (subscribed) {
+        if (hasOrgOidc) {
             const idpsRes = await cache(
                 async () =>
                     await priv.get<AxiosResponse<ListOrgIdpsResponse>>(
@@ -271,7 +286,7 @@ export default async function ResourceAuthPage(props: {
 
     let branding: LoadLoginPageBrandingResponse | null = null;
     try {
-        if (subscribed) {
+        if (hasLoginPageBranding) {
             const res = await priv.get<
                 AxiosResponse<LoadLoginPageBrandingResponse>
             >(`/login-page-branding?orgId=${authInfo.orgId}`);
diff --git a/src/lib/api/isOrgSubscribed.ts b/src/lib/api/isOrgSubscribed.ts
index ce19b9178..16fc082c0 100644
--- a/src/lib/api/isOrgSubscribed.ts
+++ b/src/lib/api/isOrgSubscribed.ts
@@ -4,9 +4,13 @@ import { getCachedSubscription } from "./getCachedSubscription";
 import { priv } from ".";
 import { AxiosResponse } from "axios";
 import { GetLicenseStatusResponse } from "@server/routers/license/types";
+import { Tier } from "@server/types/Tiers";
 
-export const isOrgSubscribed = cache(async (orgId: string) => {
+const DEFAULT_PAID_TIERS: Tier[] = ["tier1", "tier2", "tier3", "enterprise"];
+
+export const isOrgSubscribed = cache(async (orgId: string, tiers?: Tier[]) => {
     let subscribed = false;
+    const allowedTiers = tiers ?? DEFAULT_PAID_TIERS;
 
     if (build === "enterprise") {
         try {
@@ -20,7 +24,8 @@ export const isOrgSubscribed = cache(async (orgId: string) => {
         try {
             const subRes = await getCachedSubscription(orgId);
             subscribed =
-                (subRes.data.data.tier == "tier1" || subRes.data.data.tier == "tier2" || subRes.data.data.tier == "tier3" || subRes.data.data.tier == "enterprise") &&
+                !!subRes.data.data.tier &&
+                allowedTiers.includes(subRes.data.data.tier as Tier) &&
                 subRes.data.data.active;
         } catch {}
     }
diff --git a/src/lib/loadOrgLoginPageBranding.ts b/src/lib/loadOrgLoginPageBranding.ts
index 7e549622a..02ef66295 100644
--- a/src/lib/loadOrgLoginPageBranding.ts
+++ b/src/lib/loadOrgLoginPageBranding.ts
@@ -1,6 +1,7 @@
 import { priv } from "@app/lib/api";
 import { isOrgSubscribed } from "@app/lib/api/isOrgSubscribed";
 import { build } from "@server/build";
+import { tierMatrix } from "@server/lib/billing/tierMatrix";
 import { LoadLoginPageBrandingResponse } from "@server/routers/loginPage/types";
 import { AxiosResponse } from "axios";
 
@@ -11,7 +12,10 @@ export async function loadOrgLoginPageBranding(orgId: string): Promise<{
         return { primaryColor: null };
     }
 
-    const subscribed = await isOrgSubscribed(orgId);
+    const subscribed = await isOrgSubscribed(
+        orgId,
+        tierMatrix.loginPageBranding
+    );
     if (!subscribed) {
         return { primaryColor: null };
     }

From 5ef068c8dcce00d239b162a3c2da458d7c59af24 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Fri, 10 Jul 2026 15:31:37 -0400
Subject: [PATCH 17/94] Set the resource from the site

---
 server/lib/blueprints/privateResources.ts | 10 +++--
 server/lib/blueprints/publicResources.ts  | 47 ++++++++++++++++-------
 2 files changed, 40 insertions(+), 17 deletions(-)

diff --git a/server/lib/blueprints/privateResources.ts b/server/lib/blueprints/privateResources.ts
index 7d5d9a874..45b76f9f0 100644
--- a/server/lib/blueprints/privateResources.ts
+++ b/server/lib/blueprints/privateResources.ts
@@ -198,17 +198,19 @@ export async function updatePrivateResources(
             }
         }
 
+        let resourceStatusFromSite: "approved" | "pending" = "approved";
         if (siteId && allSites.length === 0) {
             // only add if there are not provided sites
             // Use the provided siteId directly, but verify it belongs to the org
             const [siteSingle] = await trx
-                .select({ siteId: sites.siteId })
+                .select({ siteId: sites.siteId, status: sites.status })
                 .from(sites)
                 .where(and(eq(sites.siteId, siteId), eq(sites.orgId, orgId)))
                 .limit(1);
             if (siteSingle) {
                 allSites.push(siteSingle);
             }
+            resourceStatusFromSite = siteSingle.status ?? "approved";
         }
 
         if (allSites.length === 0) {
@@ -259,7 +261,8 @@ export async function updatePrivateResources(
                     pamMode: resourceData["auth-daemon"]?.pam || "passthrough",
                     authDaemonMode:
                         resourceData["auth-daemon"]?.mode || "native",
-                    authDaemonPort: resourceData["auth-daemon"]?.port || 22123
+                    authDaemonPort: resourceData["auth-daemon"]?.port || 22123,
+                    status: resourceStatusFromSite
                 })
                 .where(
                     eq(
@@ -512,7 +515,8 @@ export async function updatePrivateResources(
                     pamMode: resourceData["auth-daemon"]?.pam || "passthrough",
                     authDaemonMode:
                         resourceData["auth-daemon"]?.mode || "native",
-                    authDaemonPort: resourceData["auth-daemon"]?.port || 22123
+                    authDaemonPort: resourceData["auth-daemon"]?.port || 22123,
+                    status: resourceStatusFromSite
                 })
                 .returning();
 
diff --git a/server/lib/blueprints/publicResources.ts b/server/lib/blueprints/publicResources.ts
index df3b3799e..66ab130a8 100644
--- a/server/lib/blueprints/publicResources.ts
+++ b/server/lib/blueprints/publicResources.ts
@@ -25,6 +25,7 @@ import {
     rolePolicies,
     roleResources,
     roles,
+    Site,
     sites,
     Target,
     TargetHealthCheck,
@@ -74,19 +75,40 @@ export async function updatePublicResources(
     )) {
         const targetsToUpdate: Target[] = [];
         const healthchecksToUpdate: TargetHealthCheck[] = [];
+
         let resource: Resource;
+        let resourceStatusFromSite: "approved" | "pending" = "approved";
+        let providedSite: Partial<Site> | undefined;
+        if (siteId) {
+            // Use the provided siteId directly, but verify it belongs to the org
+            [providedSite] = await trx
+                .select({
+                    siteId: sites.siteId,
+                    type: sites.type,
+                    status: sites.status
+                })
+                .from(sites)
+                .where(and(eq(sites.siteId, siteId), eq(sites.orgId, orgId)))
+                .limit(1);
+
+            resourceStatusFromSite = providedSite?.status ?? "approved";
+        }
 
         async function createTarget( // reusable function to create a target
             resourceId: number,
             targetData: TargetData
         ) {
             const targetSiteId = targetData.site;
-            let site;
+            let site: Partial<Site> | undefined;
 
             if (targetSiteId) {
                 // Look up site by niceId
                 [site] = await trx
-                    .select({ siteId: sites.siteId, type: sites.type })
+                    .select({
+                        siteId: sites.siteId,
+                        type: sites.type,
+                        status: sites.status
+                    })
                     .from(sites)
                     .where(
                         and(
@@ -95,15 +117,9 @@ export async function updatePublicResources(
                         )
                     )
                     .limit(1);
-            } else if (siteId) {
+            } else if (siteId && providedSite) {
                 // Use the provided siteId directly, but verify it belongs to the org
-                [site] = await trx
-                    .select({ siteId: sites.siteId, type: sites.type })
-                    .from(sites)
-                    .where(
-                        and(eq(sites.siteId, siteId), eq(sites.orgId, orgId))
-                    )
-                    .limit(1);
+                site = providedSite;
             } else {
                 throw new Error(`Target site is required`);
             }
@@ -139,7 +155,7 @@ export async function updatePublicResources(
                 .insert(targets)
                 .values({
                     resourceId: resourceId,
-                    siteId: site.siteId,
+                    siteId: site.siteId!,
                     ip: targetData.hostname,
                     mode: resourceData.mode as Target["mode"],
                     method: targetData.method,
@@ -172,7 +188,7 @@ export async function updatePublicResources(
                 .insert(targetHealthCheck)
                 .values({
                     name: `${targetData.hostname}:${targetData.port}`,
-                    siteId: site.siteId,
+                    siteId: site.siteId!,
                     targetId: newTarget.targetId,
                     orgId: orgId,
                     hcEnabled: healthcheckData?.enabled || false,
@@ -406,7 +422,8 @@ export async function updatePublicResources(
                                     ? (resourceData["proxy-protocol-version"] ??
                                       1)
                                     : 1,
-                            resourcePolicyId: sharedPolicy.resourcePolicyId
+                            resourcePolicyId: sharedPolicy.resourcePolicyId,
+                            status: resourceStatusFromSite
                         })
                         .where(
                             eq(
@@ -590,7 +607,8 @@ export async function updatePublicResources(
                             authDaemonPort:
                                 resourceData["auth-daemon"]?.port || 22123,
                             resourcePolicyId: null,
-                            defaultResourcePolicyId: inlinePolicyId
+                            defaultResourcePolicyId: inlinePolicyId,
+                            status: resourceStatusFromSite
                         })
                         .where(
                             eq(
@@ -1131,6 +1149,7 @@ export async function updatePublicResources(
                 .values({
                     orgId,
                     niceId: resourceNiceId,
+                    status: resourceStatusFromSite,
                     name: resourceData.name || "Unnamed Resource",
                     mode: resourceData.mode,
                     proxyPort: ["http", "ssh", "rdp", "vnc"].includes(

From e1bc0b7efd26d4d6a7e74aed3051891dc4855bf6 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Fri, 10 Jul 2026 15:36:05 -0400
Subject: [PATCH 18/94] Make sure the enabled gets set to false

---
 server/lib/blueprints/privateResources.ts | 11 +++++++++--
 server/lib/blueprints/publicResources.ts  |  5 ++++-
 2 files changed, 13 insertions(+), 3 deletions(-)

diff --git a/server/lib/blueprints/privateResources.ts b/server/lib/blueprints/privateResources.ts
index 45b76f9f0..44901e8c8 100644
--- a/server/lib/blueprints/privateResources.ts
+++ b/server/lib/blueprints/privateResources.ts
@@ -219,6 +219,13 @@ export async function updatePrivateResources(
             );
         }
 
+        const resourceEnabled =
+            resourceData.enabled == undefined || resourceData.enabled == null
+                ? true
+                : resourceStatusFromSite === "pending"
+                  ? false
+                  : resourceData.enabled;
+
         if (existingResource) {
             let domainInfo:
                 | { subdomain: string | null; domainId: string }
@@ -242,7 +249,7 @@ export async function updatePrivateResources(
                     scheme: resourceData.scheme,
                     destination: resourceData.destination,
                     destinationPort: resourceData["destination-port"],
-                    enabled: resourceData.enabled ?? true,
+                    enabled: resourceEnabled,
                     alias: resourceData.alias || null,
                     disableIcmp:
                         resourceData["disable-icmp"] ||
@@ -495,7 +502,7 @@ export async function updatePrivateResources(
                     scheme: resourceData.scheme,
                     destination: resourceData.destination,
                     destinationPort: resourceData["destination-port"],
-                    enabled: resourceData.enabled ?? true,
+                    enabled: resourceEnabled,
                     alias: resourceData.alias || null,
                     aliasAddress: aliasAddress,
                     disableIcmp:
diff --git a/server/lib/blueprints/publicResources.ts b/server/lib/blueprints/publicResources.ts
index 66ab130a8..997d56e2a 100644
--- a/server/lib/blueprints/publicResources.ts
+++ b/server/lib/blueprints/publicResources.ts
@@ -246,7 +246,10 @@ export async function updatePublicResources(
         const resourceEnabled =
             resourceData.enabled == undefined || resourceData.enabled == null
                 ? true
-                : resourceData.enabled;
+                : resourceStatusFromSite === "pending"
+                  ? false
+                  : resourceData.enabled;
+
         const resourceSsl =
             resourceData.ssl == undefined || resourceData.ssl == null
                 ? true

From d9303f87c800ad519c5868413f2735c30d6e9bdc Mon Sep 17 00:00:00 2001
From: miloschwartz <mschwartz10612@gmail.com>
Date: Fri, 10 Jul 2026 16:34:02 -0400
Subject: [PATCH 19/94] set last used cookie in smart login lookup

---
 messages/en-US.json                      |  2 +-
 src/components/SmartLoginOrgSelector.tsx | 13 +++++++++++++
 2 files changed, 14 insertions(+), 1 deletion(-)

diff --git a/messages/en-US.json b/messages/en-US.json
index ee3e16102..5833647e1 100644
--- a/messages/en-US.json
+++ b/messages/en-US.json
@@ -1517,7 +1517,7 @@
     "otpAuthDescription": "Enter the code from your authenticator app or one of your single-use backup codes.",
     "otpAuthSubmit": "Submit Code",
     "idpContinue": "Or continue with",
-    "idpLastUsed": "Last used",
+    "idpLastUsed": "Last Used",
     "otpAuthBack": "Back to Password",
     "navbar": "Navigation Menu",
     "navbarDescription": "Main navigation menu for the application",
diff --git a/src/components/SmartLoginOrgSelector.tsx b/src/components/SmartLoginOrgSelector.tsx
index 79a43782e..22a5bb01c 100644
--- a/src/components/SmartLoginOrgSelector.tsx
+++ b/src/components/SmartLoginOrgSelector.tsx
@@ -17,6 +17,8 @@ import {
 } from "next/navigation";
 import { cleanRedirect } from "@app/lib/cleanRedirect";
 import { Separator } from "@app/components/ui/separator";
+import { setClientCookie } from "@app/lib/setClientCookie";
+import { LAST_USED_IDP_COOKIE_NAME } from "@app/lib/consts";
 
 type SmartLoginOrgSelectorProps = {
     identifier: string;
@@ -141,6 +143,17 @@ export default function SmartLoginOrgSelector({
         setPendingIdpId(idpId);
         setError(null);
 
+        setClientCookie(
+            LAST_USED_IDP_COOKIE_NAME,
+            JSON.stringify({
+                orgId,
+                idpId
+            }),
+            {
+                sameSite: "Lax"
+            }
+        );
+
         let redirectToUrl: string | undefined;
         try {
             const safeRedirect = cleanRedirect(redirect || "/");

From 39c35fa539dc59d969743e278eaa02e146e2c67d Mon Sep 17 00:00:00 2001
From: miloschwartz <mschwartz10612@gmail.com>
Date: Fri, 10 Jul 2026 17:05:45 -0400
Subject: [PATCH 20/94] reorganize components nad hooks for consistency

---
 .../resources/private/[niceId]/access/page.tsx   |  2 +-
 .../resources/private/[niceId]/cidr/page.tsx     | 12 ++++++------
 .../resources/private/[niceId]/general/page.tsx  |  2 +-
 .../resources/private/[niceId]/host/page.tsx     | 12 ++++++------
 .../resources/private/[niceId]/http/page.tsx     | 10 +++++-----
 .../resources/private/[niceId]/ssh/page.tsx      | 10 +++++-----
 .../settings/resources/private/create/page.tsx   | 16 ++++++++++------
 .../PrivateResourceAccessFields.tsx              |  0
 .../PrivateResourceDestinationFields.tsx         |  0
 .../PrivateResourceHttpFields.tsx                |  0
 .../PrivateResourceMultiSiteRoutingHelp.tsx      |  0
 .../PrivateResourcePortRanges.tsx                |  0
 .../PrivateResourceSitesField.tsx                |  2 +-
 .../PrivateResourceSshFields.tsx                 |  6 +++---
 .../private => hooks}/useSaveSiteResource.ts     |  0
 .../private => lib}/formControlUtils.ts          |  0
 .../private => lib}/privateResourceUtils.ts      |  0
 17 files changed, 38 insertions(+), 34 deletions(-)
 rename src/{app/[orgId]/settings/resources/private => components}/PrivateResourceAccessFields.tsx (100%)
 rename src/{app/[orgId]/settings/resources/private => components}/PrivateResourceDestinationFields.tsx (100%)
 rename src/{app/[orgId]/settings/resources/private => components}/PrivateResourceHttpFields.tsx (100%)
 rename src/{app/[orgId]/settings/resources/private => components}/PrivateResourceMultiSiteRoutingHelp.tsx (100%)
 rename src/{app/[orgId]/settings/resources/private => components}/PrivateResourcePortRanges.tsx (100%)
 rename src/{app/[orgId]/settings/resources/private => components}/PrivateResourceSitesField.tsx (98%)
 rename src/{app/[orgId]/settings/resources/private => components}/PrivateResourceSshFields.tsx (97%)
 rename src/{app/[orgId]/settings/resources/private => hooks}/useSaveSiteResource.ts (100%)
 rename src/{app/[orgId]/settings/resources/private => lib}/formControlUtils.ts (100%)
 rename src/{app/[orgId]/settings/resources/private => lib}/privateResourceUtils.ts (100%)

diff --git a/src/app/[orgId]/settings/resources/private/[niceId]/access/page.tsx b/src/app/[orgId]/settings/resources/private/[niceId]/access/page.tsx
index e09366329..70a6504c4 100644
--- a/src/app/[orgId]/settings/resources/private/[niceId]/access/page.tsx
+++ b/src/app/[orgId]/settings/resources/private/[niceId]/access/page.tsx
@@ -29,7 +29,7 @@ import { useQuery, useQueryClient } from "@tanstack/react-query";
 import { useTranslations } from "next-intl";
 import { useActionState, useEffect } from "react";
 import { useForm } from "react-hook-form";
-import { PrivateResourceAccessFields } from "../../PrivateResourceAccessFields";
+import { PrivateResourceAccessFields } from "@app/components/PrivateResourceAccessFields";
 
 export default function PrivateResourceAccessPage() {
     const t = useTranslations();
diff --git a/src/app/[orgId]/settings/resources/private/[niceId]/cidr/page.tsx b/src/app/[orgId]/settings/resources/private/[niceId]/cidr/page.tsx
index 8064ec883..16e603c01 100644
--- a/src/app/[orgId]/settings/resources/private/[niceId]/cidr/page.tsx
+++ b/src/app/[orgId]/settings/resources/private/[niceId]/cidr/page.tsx
@@ -20,12 +20,12 @@ import { useTranslations } from "next-intl";
 import { useActionState, useMemo, useState } from "react";
 import { useForm } from "react-hook-form";
 import { z } from "zod";
-import { PrivateResourceSitesField } from "../../PrivateResourceSitesField";
-import { PrivateResourceCidrDestinationField } from "../../PrivateResourceDestinationFields";
-import { PrivateResourcePortRanges } from "../../PrivateResourcePortRanges";
-import { buildSelectedSitesForResource } from "../../privateResourceUtils";
-import { asAnyControl, asAnySetValue } from "../../formControlUtils";
-import { useSaveSiteResource } from "../../useSaveSiteResource";
+import { PrivateResourceSitesField } from "@app/components/PrivateResourceSitesField";
+import { PrivateResourceCidrDestinationField } from "@app/components/PrivateResourceDestinationFields";
+import { PrivateResourcePortRanges } from "@app/components/PrivateResourcePortRanges";
+import { useSaveSiteResource } from "@app/hooks/useSaveSiteResource";
+import { asAnyControl, asAnySetValue } from "@app/lib/formControlUtils";
+import { buildSelectedSitesForResource } from "@app/lib/privateResourceUtils";
 
 export default function PrivateResourceCidrPage() {
     const t = useTranslations();
diff --git a/src/app/[orgId]/settings/resources/private/[niceId]/general/page.tsx b/src/app/[orgId]/settings/resources/private/[niceId]/general/page.tsx
index d14b9c3d5..8dbdb3809 100644
--- a/src/app/[orgId]/settings/resources/private/[niceId]/general/page.tsx
+++ b/src/app/[orgId]/settings/resources/private/[niceId]/general/page.tsx
@@ -30,7 +30,7 @@ import { useTranslations } from "next-intl";
 import { useActionState, useMemo } from "react";
 import { useForm } from "react-hook-form";
 import { z } from "zod";
-import { useSaveSiteResource } from "../../useSaveSiteResource";
+import { useSaveSiteResource } from "@app/hooks/useSaveSiteResource";
 
 export default function PrivateResourceGeneralPage() {
     const t = useTranslations();
diff --git a/src/app/[orgId]/settings/resources/private/[niceId]/host/page.tsx b/src/app/[orgId]/settings/resources/private/[niceId]/host/page.tsx
index 73d4207cd..bb9734ad0 100644
--- a/src/app/[orgId]/settings/resources/private/[niceId]/host/page.tsx
+++ b/src/app/[orgId]/settings/resources/private/[niceId]/host/page.tsx
@@ -20,16 +20,16 @@ import { useTranslations } from "next-intl";
 import { useActionState, useMemo, useState } from "react";
 import { useForm } from "react-hook-form";
 import { z } from "zod";
-import { PrivateResourceSitesField } from "../../PrivateResourceSitesField";
-import { PrivateResourceHostDestinationFields } from "../../PrivateResourceDestinationFields";
-import { PrivateResourcePortRanges } from "../../PrivateResourcePortRanges";
-import { buildSelectedSitesForResource } from "../../privateResourceUtils";
+import { PrivateResourceSitesField } from "@app/components/PrivateResourceSitesField";
+import { PrivateResourceHostDestinationFields } from "@app/components/PrivateResourceDestinationFields";
+import { PrivateResourcePortRanges } from "@app/components/PrivateResourcePortRanges";
+import { useSaveSiteResource } from "@app/hooks/useSaveSiteResource";
 import {
     asAnyControl,
     asAnySetValue,
     asAnyWatch
-} from "../../formControlUtils";
-import { useSaveSiteResource } from "../../useSaveSiteResource";
+} from "@app/lib/formControlUtils";
+import { buildSelectedSitesForResource } from "@app/lib/privateResourceUtils";
 
 export default function PrivateResourceHostPage() {
     const t = useTranslations();
diff --git a/src/app/[orgId]/settings/resources/private/[niceId]/http/page.tsx b/src/app/[orgId]/settings/resources/private/[niceId]/http/page.tsx
index 2bbd776e5..c1263c162 100644
--- a/src/app/[orgId]/settings/resources/private/[niceId]/http/page.tsx
+++ b/src/app/[orgId]/settings/resources/private/[niceId]/http/page.tsx
@@ -22,15 +22,15 @@ import { useTranslations } from "next-intl";
 import { useActionState, useMemo, useState } from "react";
 import { useForm } from "react-hook-form";
 import { z } from "zod";
-import { PrivateResourceSitesField } from "../../PrivateResourceSitesField";
-import { PrivateResourceHttpFields } from "../../PrivateResourceHttpFields";
-import { buildSelectedSitesForResource } from "../../privateResourceUtils";
+import { PrivateResourceSitesField } from "@app/components/PrivateResourceSitesField";
+import { PrivateResourceHttpFields } from "@app/components/PrivateResourceHttpFields";
+import { useSaveSiteResource } from "@app/hooks/useSaveSiteResource";
 import {
     asAnyControl,
     asAnySetValue,
     asAnyWatch
-} from "../../formControlUtils";
-import { useSaveSiteResource } from "../../useSaveSiteResource";
+} from "@app/lib/formControlUtils";
+import { buildSelectedSitesForResource } from "@app/lib/privateResourceUtils";
 
 export default function PrivateResourceHttpPage() {
     const t = useTranslations();
diff --git a/src/app/[orgId]/settings/resources/private/[niceId]/ssh/page.tsx b/src/app/[orgId]/settings/resources/private/[niceId]/ssh/page.tsx
index 6de4082b6..9a739a073 100644
--- a/src/app/[orgId]/settings/resources/private/[niceId]/ssh/page.tsx
+++ b/src/app/[orgId]/settings/resources/private/[niceId]/ssh/page.tsx
@@ -26,15 +26,15 @@ import { useTranslations } from "next-intl";
 import { useActionState, useMemo, useState } from "react";
 import { useForm } from "react-hook-form";
 import { z } from "zod";
-import { PrivateResourceSshFields } from "../../PrivateResourceSshFields";
-import { buildSelectedSitesForResource } from "../../privateResourceUtils";
+import { PrivateResourceSshFields } from "@app/components/PrivateResourceSshFields";
+import type { Selectedsite } from "@app/components/site-selector";
+import { useSaveSiteResource } from "@app/hooks/useSaveSiteResource";
 import {
     asAnyControl,
     asAnySetValue,
     asAnyWatch
-} from "../../formControlUtils";
-import { useSaveSiteResource } from "../../useSaveSiteResource";
-import type { Selectedsite } from "@app/components/site-selector";
+} from "@app/lib/formControlUtils";
+import { buildSelectedSitesForResource } from "@app/lib/privateResourceUtils";
 
 export default function PrivateResourceSshPage() {
     const t = useTranslations();
diff --git a/src/app/[orgId]/settings/resources/private/create/page.tsx b/src/app/[orgId]/settings/resources/private/create/page.tsx
index 49b40e3c9..7e6144172 100644
--- a/src/app/[orgId]/settings/resources/private/create/page.tsx
+++ b/src/app/[orgId]/settings/resources/private/create/page.tsx
@@ -50,16 +50,20 @@ import { useParams, useRouter, useSearchParams } from "next/navigation";
 import { useEffect, useMemo, useState, useTransition } from "react";
 import { useForm } from "react-hook-form";
 import { z } from "zod";
-import { PrivateResourceSitesField } from "../PrivateResourceSitesField";
-import { PrivateResourceHttpFields } from "../PrivateResourceHttpFields";
-import { PrivateResourceSshFields } from "../PrivateResourceSshFields";
-import { PrivateResourcePortRanges } from "../PrivateResourcePortRanges";
+import { PrivateResourceSitesField } from "@app/components/PrivateResourceSitesField";
+import { PrivateResourceHttpFields } from "@app/components/PrivateResourceHttpFields";
+import { PrivateResourceSshFields } from "@app/components/PrivateResourceSshFields";
+import { PrivateResourcePortRanges } from "@app/components/PrivateResourcePortRanges";
 import {
     PrivateResourceAliasField,
     PrivateResourceCidrDestinationField,
     PrivateResourceHostDestinationFields
-} from "../PrivateResourceDestinationFields";
-import { asAnyControl, asAnySetValue, asAnyWatch } from "../formControlUtils";
+} from "@app/components/PrivateResourceDestinationFields";
+import {
+    asAnyControl,
+    asAnySetValue,
+    asAnyWatch
+} from "@app/lib/formControlUtils";
 
 export default function CreatePrivateResourcePage() {
     const params = useParams();
diff --git a/src/app/[orgId]/settings/resources/private/PrivateResourceAccessFields.tsx b/src/components/PrivateResourceAccessFields.tsx
similarity index 100%
rename from src/app/[orgId]/settings/resources/private/PrivateResourceAccessFields.tsx
rename to src/components/PrivateResourceAccessFields.tsx
diff --git a/src/app/[orgId]/settings/resources/private/PrivateResourceDestinationFields.tsx b/src/components/PrivateResourceDestinationFields.tsx
similarity index 100%
rename from src/app/[orgId]/settings/resources/private/PrivateResourceDestinationFields.tsx
rename to src/components/PrivateResourceDestinationFields.tsx
diff --git a/src/app/[orgId]/settings/resources/private/PrivateResourceHttpFields.tsx b/src/components/PrivateResourceHttpFields.tsx
similarity index 100%
rename from src/app/[orgId]/settings/resources/private/PrivateResourceHttpFields.tsx
rename to src/components/PrivateResourceHttpFields.tsx
diff --git a/src/app/[orgId]/settings/resources/private/PrivateResourceMultiSiteRoutingHelp.tsx b/src/components/PrivateResourceMultiSiteRoutingHelp.tsx
similarity index 100%
rename from src/app/[orgId]/settings/resources/private/PrivateResourceMultiSiteRoutingHelp.tsx
rename to src/components/PrivateResourceMultiSiteRoutingHelp.tsx
diff --git a/src/app/[orgId]/settings/resources/private/PrivateResourcePortRanges.tsx b/src/components/PrivateResourcePortRanges.tsx
similarity index 100%
rename from src/app/[orgId]/settings/resources/private/PrivateResourcePortRanges.tsx
rename to src/components/PrivateResourcePortRanges.tsx
diff --git a/src/app/[orgId]/settings/resources/private/PrivateResourceSitesField.tsx b/src/components/PrivateResourceSitesField.tsx
similarity index 98%
rename from src/app/[orgId]/settings/resources/private/PrivateResourceSitesField.tsx
rename to src/components/PrivateResourceSitesField.tsx
index 1490db5af..0b0b930cb 100644
--- a/src/app/[orgId]/settings/resources/private/PrivateResourceSitesField.tsx
+++ b/src/components/PrivateResourceSitesField.tsx
@@ -23,7 +23,7 @@ import {
 import { ChevronsUpDown } from "lucide-react";
 import { useTranslations } from "next-intl";
 import type { Control, FieldPath, FieldValues } from "react-hook-form";
-import { PrivateResourceMultiSiteRoutingHelp } from "./PrivateResourceMultiSiteRoutingHelp";
+import { PrivateResourceMultiSiteRoutingHelp } from "@app/components/PrivateResourceMultiSiteRoutingHelp";
 
 type PrivateResourceSitesFieldProps<T extends FieldValues> = {
     control: Control<T>;
diff --git a/src/app/[orgId]/settings/resources/private/PrivateResourceSshFields.tsx b/src/components/PrivateResourceSshFields.tsx
similarity index 97%
rename from src/app/[orgId]/settings/resources/private/PrivateResourceSshFields.tsx
rename to src/components/PrivateResourceSshFields.tsx
index e61ed2292..edfdde5de 100644
--- a/src/app/[orgId]/settings/resources/private/PrivateResourceSshFields.tsx
+++ b/src/components/PrivateResourceSshFields.tsx
@@ -9,10 +9,10 @@ import {
 } from "@app/components/Settings";
 import { PaidFeaturesAlert } from "@app/components/PaidFeaturesAlert";
 import { SshServerSettingsFields } from "@app/components/SshServerSettingsFields";
-import { PrivateResourceAliasField } from "./PrivateResourceDestinationFields";
-import { PrivateResourceSitesField } from "./PrivateResourceSitesField";
-import { getSshUseMultiSiteTargetForm } from "./privateResourceUtils";
+import { PrivateResourceAliasField } from "@app/components/PrivateResourceDestinationFields";
+import { PrivateResourceSitesField } from "@app/components/PrivateResourceSitesField";
 import { inferSshPamMode } from "@app/lib/privateResourceForm";
+import { getSshUseMultiSiteTargetForm } from "@app/lib/privateResourceUtils";
 import {
     FormControl,
     FormField,
diff --git a/src/app/[orgId]/settings/resources/private/useSaveSiteResource.ts b/src/hooks/useSaveSiteResource.ts
similarity index 100%
rename from src/app/[orgId]/settings/resources/private/useSaveSiteResource.ts
rename to src/hooks/useSaveSiteResource.ts
diff --git a/src/app/[orgId]/settings/resources/private/formControlUtils.ts b/src/lib/formControlUtils.ts
similarity index 100%
rename from src/app/[orgId]/settings/resources/private/formControlUtils.ts
rename to src/lib/formControlUtils.ts
diff --git a/src/app/[orgId]/settings/resources/private/privateResourceUtils.ts b/src/lib/privateResourceUtils.ts
similarity index 100%
rename from src/app/[orgId]/settings/resources/private/privateResourceUtils.ts
rename to src/lib/privateResourceUtils.ts

From 7d475f5e9186886c453975a6325aede1d9fe90e9 Mon Sep 17 00:00:00 2001
From: miloschwartz <mschwartz10612@gmail.com>
Date: Fri, 10 Jul 2026 17:18:33 -0400
Subject: [PATCH 21/94] filter out pending resources

---
 src/app/[orgId]/settings/resources/private/page.tsx | 1 +
 src/app/[orgId]/settings/resources/public/page.tsx  | 1 +
 2 files changed, 2 insertions(+)

diff --git a/src/app/[orgId]/settings/resources/private/page.tsx b/src/app/[orgId]/settings/resources/private/page.tsx
index 8206d14e8..348340aa9 100644
--- a/src/app/[orgId]/settings/resources/private/page.tsx
+++ b/src/app/[orgId]/settings/resources/private/page.tsx
@@ -27,6 +27,7 @@ export default async function ClientResourcesPage(
     const params = await props.params;
     const t = await getTranslations();
     const searchParams = new URLSearchParams(await props.searchParams);
+    searchParams.set("status", "approved");
 
     let siteResources: ListAllSiteResourcesByOrgResponse["siteResources"] = [];
     let pagination: ListAllSiteResourcesByOrgResponse["pagination"] = {
diff --git a/src/app/[orgId]/settings/resources/public/page.tsx b/src/app/[orgId]/settings/resources/public/page.tsx
index e0b9f6210..f8cc85dae 100644
--- a/src/app/[orgId]/settings/resources/public/page.tsx
+++ b/src/app/[orgId]/settings/resources/public/page.tsx
@@ -38,6 +38,7 @@ export default async function ProxyResourcesPage(
     const params = await props.params;
     const t = await getTranslations();
     const searchParams = new URLSearchParams(await props.searchParams);
+    searchParams.set("status", "approved");
 
     let resources: ListResourcesResponse["resources"] = [];
     let pagination: ListResourcesResponse["pagination"] = {

From 34b18bdb53396807e0544dcb56249da75eef6cff Mon Sep 17 00:00:00 2001
From: miloschwartz <mschwartz10612@gmail.com>
Date: Fri, 10 Jul 2026 17:24:10 -0400
Subject: [PATCH 22/94] only show approved resources in launcher

---
 .../launcher/launcherResourceAccess.ts        | 75 +++++++++++++++----
 1 file changed, 61 insertions(+), 14 deletions(-)

diff --git a/server/routers/launcher/launcherResourceAccess.ts b/server/routers/launcher/launcherResourceAccess.ts
index ec4500262..ce94a7a50 100644
--- a/server/routers/launcher/launcherResourceAccess.ts
+++ b/server/routers/launcher/launcherResourceAccess.ts
@@ -157,7 +157,8 @@ async function resolveAccessibleIdsUncached(
             .where(
                 and(
                     eq(userResources.userId, userId),
-                    eq(resources.orgId, orgId)
+                    eq(resources.orgId, orgId),
+                    eq(resources.status, "approved")
                 )
             ),
         userRoleIds.length > 0
@@ -171,7 +172,8 @@ async function resolveAccessibleIdsUncached(
                   .where(
                       and(
                           inArray(roleResources.roleId, userRoleIds),
-                          eq(resources.orgId, orgId)
+                          eq(resources.orgId, orgId),
+                          eq(resources.status, "approved")
                       )
                   )
             : Promise.resolve([]),
@@ -183,7 +185,11 @@ async function resolveAccessibleIdsUncached(
                 eq(effectiveResourcePolicyId, userPolicies.resourcePolicyId)
             )
             .where(
-                and(eq(userPolicies.userId, userId), eq(resources.orgId, orgId))
+                and(
+                    eq(userPolicies.userId, userId),
+                    eq(resources.orgId, orgId),
+                    eq(resources.status, "approved")
+                )
             ),
         userRoleIds.length > 0
             ? db
@@ -199,21 +205,48 @@ async function resolveAccessibleIdsUncached(
                   .where(
                       and(
                           inArray(rolePolicies.roleId, userRoleIds),
-                          eq(resources.orgId, orgId)
+                          eq(resources.orgId, orgId),
+                          eq(resources.status, "approved")
                       )
                   )
             : Promise.resolve([]),
         db
             .select({ siteResourceId: userSiteResources.siteResourceId })
             .from(userSiteResources)
-            .where(eq(userSiteResources.userId, userId)),
+            .innerJoin(
+                siteResources,
+                eq(
+                    userSiteResources.siteResourceId,
+                    siteResources.siteResourceId
+                )
+            )
+            .where(
+                and(
+                    eq(userSiteResources.userId, userId),
+                    eq(siteResources.orgId, orgId),
+                    eq(siteResources.status, "approved")
+                )
+            ),
         userRoleIds.length > 0
             ? db
                   .select({
                       siteResourceId: roleSiteResources.siteResourceId
                   })
                   .from(roleSiteResources)
-                  .where(inArray(roleSiteResources.roleId, userRoleIds))
+                  .innerJoin(
+                      siteResources,
+                      eq(
+                          roleSiteResources.siteResourceId,
+                          siteResources.siteResourceId
+                      )
+                  )
+                  .where(
+                      and(
+                          inArray(roleSiteResources.roleId, userRoleIds),
+                          eq(siteResources.orgId, orgId),
+                          eq(siteResources.status, "approved")
+                      )
+                  )
             : Promise.resolve([])
     ]);
 
@@ -365,6 +398,7 @@ async function filterPublicResourceIdsByTextSearch(
                 inArray(resources.resourceId, resourceIds),
                 eq(resources.orgId, orgId),
                 eq(resources.enabled, true),
+                eq(resources.status, "approved"),
                 textMatch
             )
         );
@@ -402,6 +436,7 @@ async function filterSiteResourceIdsByTextSearch(
                 inArray(siteResources.siteResourceId, siteResourceIds),
                 eq(siteResources.orgId, orgId),
                 eq(siteResources.enabled, true),
+                eq(siteResources.status, "approved"),
                 textMatch
             )
         );
@@ -503,7 +538,8 @@ async function listSiteGroups(
         const publicConditions = [
             inArray(resources.resourceId, accessible.resourceIds),
             eq(resources.orgId, orgId),
-            eq(resources.enabled, true)
+            eq(resources.enabled, true),
+            eq(resources.status, "approved")
         ];
         if (searchPublic) {
             publicConditions.push(searchPublic);
@@ -558,7 +594,8 @@ async function listSiteGroups(
         const siteConditions = [
             inArray(siteResources.siteResourceId, accessible.siteResourceIds),
             eq(siteResources.orgId, orgId),
-            eq(siteResources.enabled, true)
+            eq(siteResources.enabled, true),
+            eq(siteResources.status, "approved")
         ];
         if (searchSite) {
             siteConditions.push(searchSite);
@@ -621,7 +658,8 @@ async function listSiteGroups(
         const noSitePublicConditions = [
             inArray(resources.resourceId, accessible.resourceIds),
             eq(resources.orgId, orgId),
-            eq(resources.enabled, true)
+            eq(resources.enabled, true),
+            eq(resources.status, "approved")
         ];
         if (searchPublic) {
             noSitePublicConditions.push(searchPublic);
@@ -655,7 +693,8 @@ async function listSiteGroups(
         const noSiteSiteConditions = [
             inArray(siteResources.siteResourceId, accessible.siteResourceIds),
             eq(siteResources.orgId, orgId),
-            eq(siteResources.enabled, true)
+            eq(siteResources.enabled, true),
+            eq(siteResources.status, "approved")
         ];
         if (searchSite) {
             noSiteSiteConditions.push(searchSite);
@@ -746,7 +785,8 @@ async function listLabelGroups(
         const publicConditions = [
             inArray(resources.resourceId, accessible.resourceIds),
             eq(resources.orgId, orgId),
-            eq(resources.enabled, true)
+            eq(resources.enabled, true),
+            eq(resources.status, "approved")
         ];
         const searchPublic = buildSearchConditionForPublic(query.query);
         if (searchPublic) {
@@ -810,7 +850,8 @@ async function listLabelGroups(
         const siteConditions = [
             inArray(siteResources.siteResourceId, accessible.siteResourceIds),
             eq(siteResources.orgId, orgId),
-            eq(siteResources.enabled, true)
+            eq(siteResources.enabled, true),
+            eq(siteResources.status, "approved")
         ];
         const searchSite = buildSearchConditionForSiteResource(query.query);
         if (searchSite) {
@@ -997,6 +1038,7 @@ async function mapPublicResources(
                 inArray(resources.resourceId, resourceIds),
                 eq(resources.orgId, orgId),
                 eq(resources.enabled, true),
+                eq(resources.status, "approved"),
                 siteIdFilter != null
                     ? eq(sites.siteId, siteIdFilter)
                     : undefined
@@ -1088,6 +1130,7 @@ async function mapSiteResources(
                 inArray(siteResources.siteResourceId, siteResourceIds),
                 eq(siteResources.orgId, orgId),
                 eq(siteResources.enabled, true),
+                eq(siteResources.status, "approved"),
                 siteIdFilter != null
                     ? eq(sites.siteId, siteIdFilter)
                     : undefined
@@ -1382,7 +1425,8 @@ async function collectAccessibleSites(
         const publicConditions = [
             inArray(resources.resourceId, accessible.resourceIds),
             eq(resources.orgId, orgId),
-            eq(resources.enabled, true)
+            eq(resources.enabled, true),
+            eq(resources.status, "approved")
         ];
         if (siteNameSearch) {
             publicConditions.push(siteNameSearch);
@@ -1422,7 +1466,8 @@ async function collectAccessibleSites(
         const siteConditions = [
             inArray(siteResources.siteResourceId, accessible.siteResourceIds),
             eq(siteResources.orgId, orgId),
-            eq(siteResources.enabled, true)
+            eq(siteResources.enabled, true),
+            eq(siteResources.status, "approved")
         ];
         if (siteNameSearch) {
             siteConditions.push(siteNameSearch);
@@ -1476,6 +1521,7 @@ async function collectAccessibleLabels(
             inArray(resources.resourceId, accessible.resourceIds),
             eq(resources.orgId, orgId),
             eq(resources.enabled, true),
+            eq(resources.status, "approved"),
             eq(labels.orgId, orgId)
         ];
         if (labelNameSearch) {
@@ -1511,6 +1557,7 @@ async function collectAccessibleLabels(
             inArray(siteResources.siteResourceId, accessible.siteResourceIds),
             eq(siteResources.orgId, orgId),
             eq(siteResources.enabled, true),
+            eq(siteResources.status, "approved"),
             eq(labels.orgId, orgId)
         ];
         if (labelNameSearch) {

From 591cb9cdc1eaf27dcaed424904f8204bcf058318 Mon Sep 17 00:00:00 2001
From: miloschwartz <mschwartz10612@gmail.com>
Date: Fri, 10 Jul 2026 18:05:16 -0400
Subject: [PATCH 23/94] dont use strict query params in list alises

---
 server/routers/resource/listUserResourceAliases.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/routers/resource/listUserResourceAliases.ts b/server/routers/resource/listUserResourceAliases.ts
index 100b1624d..98e73ad85 100644
--- a/server/routers/resource/listUserResourceAliases.ts
+++ b/server/routers/resource/listUserResourceAliases.ts
@@ -57,7 +57,7 @@ const listUserResourceAliasesParamsSchema = z.strictObject({
     orgId: z.string()
 });
 
-const listUserResourceAliasesQuerySchema = z.strictObject({
+const listUserResourceAliasesQuerySchema = z.object({
     pageSize: z.coerce
         .number<string>()
         .int()

From 933ca71c16fa5c94856cf586c1b7aa38b3a1481b Mon Sep 17 00:00:00 2001
From: miloschwartz <mschwartz10612@gmail.com>
Date: Sun, 12 Jul 2026 17:16:08 -0400
Subject: [PATCH 24/94] add approve site endpoint

---
 server/routers/external.ts           |   8 +
 server/routers/integration.ts        |   8 +
 server/routers/site/approveSite.ts   | 251 +++++++++++++++++++++++++++
 server/routers/site/index.ts         |   1 +
 server/routers/site/updateSite.ts    |   1 -
 src/components/PendingSitesTable.tsx |   2 +-
 6 files changed, 269 insertions(+), 2 deletions(-)
 create mode 100644 server/routers/site/approveSite.ts

diff --git a/server/routers/external.ts b/server/routers/external.ts
index 9e4c5b3f1..9b9c48293 100644
--- a/server/routers/external.ts
+++ b/server/routers/external.ts
@@ -248,6 +248,14 @@ authenticated.post(
     site.updateSite
 );
 
+authenticated.post(
+    "/site/:siteId/approve",
+    verifySiteAccess,
+    verifyUserHasAction(ActionsEnum.updateSite),
+    logActionAudit(ActionsEnum.updateSite),
+    site.approveSite
+);
+
 authenticated.delete(
     "/site/:siteId",
     verifySiteAccess,
diff --git a/server/routers/integration.ts b/server/routers/integration.ts
index 74ea20078..f6ab6bf6c 100644
--- a/server/routers/integration.ts
+++ b/server/routers/integration.ts
@@ -138,6 +138,14 @@ authenticated.post(
     logActionAudit(ActionsEnum.updateSite),
     site.updateSite
 );
+
+authenticated.post(
+    "/site/:siteId/approve",
+    verifyApiKeySiteAccess,
+    verifyApiKeyHasAction(ActionsEnum.updateSite),
+    logActionAudit(ActionsEnum.updateSite),
+    site.approveSite
+);
 authenticated.post(
     "/org/:orgId/reset-bandwidth",
     verifyApiKeyOrgAccess,
diff --git a/server/routers/site/approveSite.ts b/server/routers/site/approveSite.ts
new file mode 100644
index 000000000..19e2795ad
--- /dev/null
+++ b/server/routers/site/approveSite.ts
@@ -0,0 +1,251 @@
+import { Request, Response, NextFunction } from "express";
+import { z } from "zod";
+import {
+    db,
+    resources,
+    siteNetworks,
+    siteResources,
+    sites,
+    type Site,
+    type SiteResource
+} from "@server/db";
+import { and, eq, inArray } from "drizzle-orm";
+import response from "@server/lib/response";
+import HttpCode from "@server/types/HttpCode";
+import createHttpError from "http-errors";
+import logger from "@server/logger";
+import { fromError } from "zod-validation-error";
+import { OpenAPITags, registry } from "@server/openApi";
+import {
+    getResourceIdsForSite,
+    getSiteResourceIdsForSite
+} from "@server/lib/deleteSiteAssociatedResources";
+import {
+    handleMessagingForUpdatedSiteResource,
+    rebuildClientAssociationsFromSiteResource,
+    waitForSiteResourceRebuildIdle
+} from "@server/lib/rebuildClientAssociations";
+
+const approveSiteParamsSchema = z.strictObject({
+    siteId: z.coerce.number().int().positive()
+});
+
+registry.registerPath({
+    method: "post",
+    path: "/site/{siteId}/approve",
+    description:
+        "Approve a pending site and approve (and enable when needed) its associated resources.",
+    tags: [OpenAPITags.Site],
+    request: {
+        params: approveSiteParamsSchema
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
+type SiteResourceEnableSideEffect = {
+    existing: SiteResource;
+    updated: SiteResource;
+    siteIds: number[];
+};
+
+export async function approveSite(
+    req: Request,
+    res: Response,
+    next: NextFunction
+): Promise<any> {
+    try {
+        const parsedParams = approveSiteParamsSchema.safeParse(req.params);
+        if (!parsedParams.success) {
+            return next(
+                createHttpError(
+                    HttpCode.BAD_REQUEST,
+                    fromError(parsedParams.error).toString()
+                )
+            );
+        }
+
+        const { siteId } = parsedParams.data;
+
+        const [existingSite] = await db
+            .select()
+            .from(sites)
+            .where(eq(sites.siteId, siteId))
+            .limit(1);
+
+        if (!existingSite) {
+            return next(
+                createHttpError(
+                    HttpCode.NOT_FOUND,
+                    `Site with ID ${siteId} not found`
+                )
+            );
+        }
+
+        if (!existingSite.orgId) {
+            return next(
+                createHttpError(
+                    HttpCode.BAD_REQUEST,
+                    `Site with ID ${siteId} has no organization`
+                )
+            );
+        }
+
+        const orgId = existingSite.orgId;
+        let updatedSite: Site | undefined;
+        const siteResourceEnableSideEffects: SiteResourceEnableSideEffect[] =
+            [];
+
+        await db.transaction(async (trx) => {
+            [updatedSite] = await trx
+                .update(sites)
+                .set({ status: "approved" })
+                .where(eq(sites.siteId, siteId))
+                .returning();
+
+            const resourceIds = await getResourceIdsForSite(siteId, trx);
+            const siteResourceIds = await getSiteResourceIdsForSite(
+                siteId,
+                orgId,
+                trx
+            );
+
+            if (resourceIds.length > 0) {
+                const pendingDisabledResources = await trx
+                    .select({ resourceId: resources.resourceId })
+                    .from(resources)
+                    .where(
+                        and(
+                            inArray(resources.resourceId, resourceIds),
+                            eq(resources.status, "pending"),
+                            eq(resources.enabled, false)
+                        )
+                    );
+
+                await trx
+                    .update(resources)
+                    .set({ status: "approved" })
+                    .where(inArray(resources.resourceId, resourceIds));
+
+                if (pendingDisabledResources.length > 0) {
+                    await trx
+                        .update(resources)
+                        .set({ enabled: true })
+                        .where(
+                            inArray(
+                                resources.resourceId,
+                                pendingDisabledResources.map(
+                                    (r) => r.resourceId
+                                )
+                            )
+                        );
+                }
+            }
+
+            if (siteResourceIds.length > 0) {
+                const existingSiteResources = await trx
+                    .select()
+                    .from(siteResources)
+                    .where(
+                        inArray(siteResources.siteResourceId, siteResourceIds)
+                    );
+
+                const pendingDisabledSiteResources =
+                    existingSiteResources.filter(
+                        (sr) => sr.status === "pending" && !sr.enabled
+                    );
+
+                await trx
+                    .update(siteResources)
+                    .set({ status: "approved" })
+                    .where(
+                        inArray(siteResources.siteResourceId, siteResourceIds)
+                    );
+
+                if (pendingDisabledSiteResources.length > 0) {
+                    const enableIds = pendingDisabledSiteResources.map(
+                        (sr) => sr.siteResourceId
+                    );
+
+                    const updatedEnabledSiteResources = await trx
+                        .update(siteResources)
+                        .set({ enabled: true })
+                        .where(inArray(siteResources.siteResourceId, enableIds))
+                        .returning();
+
+                    for (const updated of updatedEnabledSiteResources) {
+                        const existing = pendingDisabledSiteResources.find(
+                            (sr) => sr.siteResourceId === updated.siteResourceId
+                        );
+                        if (!existing || !updated.networkId) {
+                            continue;
+                        }
+
+                        const networkSites = await trx
+                            .select({ siteId: siteNetworks.siteId })
+                            .from(siteNetworks)
+                            .where(
+                                eq(siteNetworks.networkId, updated.networkId)
+                            );
+
+                        siteResourceEnableSideEffects.push({
+                            existing,
+                            updated,
+                            siteIds: networkSites.map((s) => s.siteId)
+                        });
+                    }
+                }
+            }
+        });
+
+        for (const sideEffect of siteResourceEnableSideEffects) {
+            rebuildClientAssociationsFromSiteResource(sideEffect.updated)
+                .then(() =>
+                    waitForSiteResourceRebuildIdle(
+                        sideEffect.updated.siteResourceId
+                    )
+                )
+                .then(() =>
+                    handleMessagingForUpdatedSiteResource(
+                        sideEffect.existing,
+                        sideEffect.updated,
+                        sideEffect.siteIds,
+                        sideEffect.siteIds
+                    )
+                )
+                .catch((e) => {
+                    logger.error(
+                        `Failed to rebuild and handle messaging for site resource ${sideEffect.updated.siteResourceId} after site approval:`,
+                        e
+                    );
+                });
+        }
+
+        return response(res, {
+            data: updatedSite ?? null,
+            success: true,
+            error: false,
+            message: "Site approved successfully",
+            status: HttpCode.OK
+        });
+    } catch (error) {
+        logger.error(error);
+        return next(
+            createHttpError(HttpCode.INTERNAL_SERVER_ERROR, "An error occurred")
+        );
+    }
+}
diff --git a/server/routers/site/index.ts b/server/routers/site/index.ts
index 292c57971..43b778f62 100644
--- a/server/routers/site/index.ts
+++ b/server/routers/site/index.ts
@@ -3,6 +3,7 @@ export * from "./getStatusHistory";
 export * from "./createSite";
 export * from "./deleteSite";
 export * from "./updateSite";
+export * from "./approveSite";
 export * from "./listSites";
 export * from "./listSiteRoles";
 export * from "./pickSiteDefaults";
diff --git a/server/routers/site/updateSite.ts b/server/routers/site/updateSite.ts
index c6851a3c3..42ab8b246 100644
--- a/server/routers/site/updateSite.ts
+++ b/server/routers/site/updateSite.ts
@@ -21,7 +21,6 @@ const updateSiteBodySchema = z
         name: z.string().min(1).max(255).optional(),
         niceId: z.string().min(1).max(255).optional(),
         dockerSocketEnabled: z.boolean().optional(),
-        status: z.enum(["pending", "approved"]).optional(),
         autoUpdateEnabled: z.boolean().optional(),
         autoUpdateOverrideOrg: z.boolean().optional()
     })
diff --git a/src/components/PendingSitesTable.tsx b/src/components/PendingSitesTable.tsx
index 8cdfc424d..e2af5ee4e 100644
--- a/src/components/PendingSitesTable.tsx
+++ b/src/components/PendingSitesTable.tsx
@@ -111,7 +111,7 @@ export default function PendingSitesTable({
     async function approveSite(siteId: number) {
         setApprovingIds((prev) => new Set(prev).add(siteId));
         try {
-            await api.post(`/site/${siteId}`, { status: "approved" });
+            await api.post(`/site/${siteId}/approve`);
             toast({
                 title: t("success"),
                 description: t("siteApproveSuccess"),

From a8f3f710213ea16400cafd4d46410d2719b1d420 Mon Sep 17 00:00:00 2001
From: miloschwartz <mschwartz10612@gmail.com>
Date: Sun, 12 Jul 2026 17:48:48 -0400
Subject: [PATCH 25/94] add reject endpoint

---
 messages/en-US.json                         |  10 +-
 server/auth/actions.ts                      |   1 +
 server/lib/deleteResource.ts                |   8 +-
 server/lib/deleteSiteAssociatedResources.ts |  85 +++++++++-
 server/routers/external.ts                  |  12 +-
 server/routers/integration.ts               |   7 -
 server/routers/site/deleteSite.ts           |  18 +-
 server/routers/site/index.ts                |   1 +
 server/routers/site/rejectSite.ts           | 178 ++++++++++++++++++++
 src/components/PendingSitesTable.tsx        |  26 +--
 src/components/PermissionsSelectBox.tsx     |   4 +-
 11 files changed, 309 insertions(+), 41 deletions(-)
 create mode 100644 server/routers/site/rejectSite.ts

diff --git a/messages/en-US.json b/messages/en-US.json
index 2a2c83b18..549865dcf 100644
--- a/messages/en-US.json
+++ b/messages/en-US.json
@@ -449,8 +449,14 @@
     "provisioningManage": "Provisioning",
     "provisioningDescription": "Manage provisioning keys and review pending sites awaiting approval.",
     "pendingSites": "Pending Sites",
-    "siteApproveSuccess": "Site approved successfully",
+    "siteApproveSuccess": "Site and associated resources approved successfully",
     "siteApproveError": "Error approving site",
+    "siteReject": "Reject Site",
+    "siteQuestionReject": "Are you sure you want to reject this site?",
+    "siteMessageReject": "This will permanently delete the site and any associated resources that are still pending.",
+    "siteConfirmReject": "Confirm Reject Site",
+    "siteRejectSuccess": "Site rejected successfully",
+    "siteRejectError": "Error rejecting site",
     "provisioningKeys": "Provisioning Keys",
     "searchProvisioningKeys": "Search provisioning keys...",
     "provisioningKeysAdd": "Generate Provisioning Key",
@@ -1420,6 +1426,8 @@
     "setupTokenDescription": "Enter the setup token from the server console.",
     "setupTokenRequired": "Setup token is required",
     "actionUpdateSite": "Update Site",
+    "actionApproveSite": "Approve Site",
+    "actionRejectSite": "Reject Site",
     "actionResetSiteBandwidth": "Reset Organization Bandwidth",
     "actionListSiteRoles": "List Allowed Site Roles",
     "actionCreateResource": "Create Resource",
diff --git a/server/auth/actions.ts b/server/auth/actions.ts
index 50c98c528..741d7a057 100644
--- a/server/auth/actions.ts
+++ b/server/auth/actions.ts
@@ -21,6 +21,7 @@ export enum ActionsEnum {
     getSite = "getSite",
     listSites = "listSites",
     updateSite = "updateSite",
+    updateSiteApprovals = "updateSiteApprovals",
     restartSite = "restartSite",
     resetSiteBandwidth = "resetSiteBandwidth",
     reGenerateSecret = "reGenerateSecret",
diff --git a/server/lib/deleteResource.ts b/server/lib/deleteResource.ts
index b2ffa0f0f..3f33c7400 100644
--- a/server/lib/deleteResource.ts
+++ b/server/lib/deleteResource.ts
@@ -14,8 +14,6 @@ import {
 } from "@server/db";
 import logger from "@server/logger";
 import { removeTargets } from "@server/routers/newt/targets";
-import createHttpError from "http-errors";
-import HttpCode from "@server/types/HttpCode";
 
 export type DeleteResourceResult = {
     deletedResource: Resource;
@@ -117,10 +115,10 @@ export async function runResourceDeleteSideEffects(
             .limit(1);
 
         if (!site) {
-            throw createHttpError(
-                HttpCode.NOT_FOUND,
-                `Site with ID ${target.siteId} not found`
+            logger.debug(
+                `Site with ID ${target.siteId} not found during resource delete side effects; skipping target removal`
             );
+            continue;
         }
 
         if (site.pubKey && site.type === "newt") {
diff --git a/server/lib/deleteSiteAssociatedResources.ts b/server/lib/deleteSiteAssociatedResources.ts
index 61da82f58..e69585d1a 100644
--- a/server/lib/deleteSiteAssociatedResources.ts
+++ b/server/lib/deleteSiteAssociatedResources.ts
@@ -1,6 +1,7 @@
-import { and, eq, sql } from "drizzle-orm";
+import { and, eq, inArray, sql } from "drizzle-orm";
 import {
     db,
+    resources,
     siteNetworks,
     siteResources,
     targets,
@@ -97,6 +98,64 @@ export function exceedsSiteAssociatedResourceDeleteLimit(
     return resourceCount > MAX_SITE_ASSOCIATED_RESOURCES_FOR_BULK_DELETE;
 }
 
+export async function getPendingResourceIdsForSite(
+    siteId: number,
+    trx: Transaction | typeof db = db
+): Promise<number[]> {
+    const resourceIds = await getResourceIdsForSite(siteId, trx);
+    if (resourceIds.length === 0) {
+        return [];
+    }
+
+    const rows = await trx
+        .select({ resourceId: resources.resourceId })
+        .from(resources)
+        .where(
+            and(
+                inArray(resources.resourceId, resourceIds),
+                eq(resources.status, "pending")
+            )
+        );
+
+    return rows.map((row) => row.resourceId);
+}
+
+export async function getPendingSiteResourceIdsForSite(
+    siteId: number,
+    orgId: string,
+    trx: Transaction | typeof db = db
+): Promise<number[]> {
+    const siteResourceIds = await getSiteResourceIdsForSite(siteId, orgId, trx);
+    if (siteResourceIds.length === 0) {
+        return [];
+    }
+
+    const rows = await trx
+        .select({ siteResourceId: siteResources.siteResourceId })
+        .from(siteResources)
+        .where(
+            and(
+                inArray(siteResources.siteResourceId, siteResourceIds),
+                eq(siteResources.status, "pending")
+            )
+        );
+
+    return rows.map((row) => row.siteResourceId);
+}
+
+export async function getPendingAssociatedResourceCountForSite(
+    siteId: number,
+    orgId: string,
+    trx: Transaction | typeof db = db
+): Promise<number> {
+    const [resourceIds, siteResourceIds] = await Promise.all([
+        getPendingResourceIdsForSite(siteId, trx),
+        getPendingSiteResourceIdsForSite(siteId, orgId, trx)
+    ]);
+
+    return resourceIds.length + siteResourceIds.length;
+}
+
 export async function deleteAssociatedResourcesForSite(
     siteId: number,
     orgId: string,
@@ -105,12 +164,32 @@ export async function deleteAssociatedResourcesForSite(
     const resourceIds = await getResourceIdsForSite(siteId, trx);
     const siteResourceIds = await getSiteResourceIdsForSite(siteId, orgId, trx);
 
-    const [resources, siteResourcesDeleted] = await Promise.all([
+    const [deletedResources, siteResourcesDeleted] = await Promise.all([
         performDeleteResources(resourceIds, trx),
         performDeleteSiteResources(siteResourceIds, trx)
     ]);
 
-    return { resources, siteResources: siteResourcesDeleted };
+    return { resources: deletedResources, siteResources: siteResourcesDeleted };
+}
+
+export async function deletePendingAssociatedResourcesForSite(
+    siteId: number,
+    orgId: string,
+    trx: Transaction | typeof db = db
+): Promise<DeleteSiteAssociatedResourcesSideEffects> {
+    const resourceIds = await getPendingResourceIdsForSite(siteId, trx);
+    const siteResourceIds = await getPendingSiteResourceIdsForSite(
+        siteId,
+        orgId,
+        trx
+    );
+
+    const [deletedResources, siteResourcesDeleted] = await Promise.all([
+        performDeleteResources(resourceIds, trx),
+        performDeleteSiteResources(siteResourceIds, trx)
+    ]);
+
+    return { resources: deletedResources, siteResources: siteResourcesDeleted };
 }
 
 export async function runDeleteSiteAssociatedResourcesSideEffects(
diff --git a/server/routers/external.ts b/server/routers/external.ts
index 9b9c48293..62ca15316 100644
--- a/server/routers/external.ts
+++ b/server/routers/external.ts
@@ -251,11 +251,19 @@ authenticated.post(
 authenticated.post(
     "/site/:siteId/approve",
     verifySiteAccess,
-    verifyUserHasAction(ActionsEnum.updateSite),
-    logActionAudit(ActionsEnum.updateSite),
+    verifyUserHasAction(ActionsEnum.updateSiteApprovals),
+    logActionAudit(ActionsEnum.updateSiteApprovals),
     site.approveSite
 );
 
+authenticated.post(
+    "/site/:siteId/reject",
+    verifySiteAccess,
+    verifyUserHasAction(ActionsEnum.updateSiteApprovals),
+    logActionAudit(ActionsEnum.updateSiteApprovals),
+    site.rejectSite
+);
+
 authenticated.delete(
     "/site/:siteId",
     verifySiteAccess,
diff --git a/server/routers/integration.ts b/server/routers/integration.ts
index f6ab6bf6c..3abd664eb 100644
--- a/server/routers/integration.ts
+++ b/server/routers/integration.ts
@@ -139,13 +139,6 @@ authenticated.post(
     site.updateSite
 );
 
-authenticated.post(
-    "/site/:siteId/approve",
-    verifyApiKeySiteAccess,
-    verifyApiKeyHasAction(ActionsEnum.updateSite),
-    logActionAudit(ActionsEnum.updateSite),
-    site.approveSite
-);
 authenticated.post(
     "/org/:orgId/reset-bandwidth",
     verifyApiKeyOrgAccess,
diff --git a/server/routers/site/deleteSite.ts b/server/routers/site/deleteSite.ts
index 602032ffb..2126b69d8 100644
--- a/server/routers/site/deleteSite.ts
+++ b/server/routers/site/deleteSite.ts
@@ -159,15 +159,21 @@ export async function deleteSite(
             siteResources: []
         };
 
-        await db.transaction(async (trx) => {
-            if (deleteResources) {
+        if (deleteResources) {
+            await db.transaction(async (trx) => {
                 resourceSideEffects = await deleteAssociatedResourcesForSite(
                     siteId,
                     site.orgId,
                     trx
                 );
-            }
+            });
 
+            await runDeleteSiteAssociatedResourcesSideEffects(
+                resourceSideEffects
+            );
+        }
+
+        await db.transaction(async (trx) => {
             if (site.type == "wireguard") {
                 if (site.pubKey) {
                     await deletePeer(site.exitNodeId!, site.pubKey);
@@ -180,12 +186,6 @@ export async function deleteSite(
             await usageService.add(site.orgId, LimitId.SITES, -1, trx);
         });
 
-        if (deleteResources) {
-            await runDeleteSiteAssociatedResourcesSideEffects(
-                resourceSideEffects
-            );
-        }
-
         if (deletedNewt) {
             const payload = {
                 type: `newt/wg/terminate`,
diff --git a/server/routers/site/index.ts b/server/routers/site/index.ts
index 43b778f62..c0c399789 100644
--- a/server/routers/site/index.ts
+++ b/server/routers/site/index.ts
@@ -4,6 +4,7 @@ export * from "./createSite";
 export * from "./deleteSite";
 export * from "./updateSite";
 export * from "./approveSite";
+export * from "./rejectSite";
 export * from "./listSites";
 export * from "./listSiteRoles";
 export * from "./pickSiteDefaults";
diff --git a/server/routers/site/rejectSite.ts b/server/routers/site/rejectSite.ts
new file mode 100644
index 000000000..037879e82
--- /dev/null
+++ b/server/routers/site/rejectSite.ts
@@ -0,0 +1,178 @@
+import { Request, Response, NextFunction } from "express";
+import { z } from "zod";
+import { db } from "@server/db";
+import { newts, sites } from "@server/db";
+import { eq } from "drizzle-orm";
+import response from "@server/lib/response";
+import HttpCode from "@server/types/HttpCode";
+import createHttpError from "http-errors";
+import logger from "@server/logger";
+import { deletePeer } from "../gerbil/peers";
+import { fromError } from "zod-validation-error";
+import { sendToClient } from "#dynamic/routers/ws";
+import { OpenAPITags, registry } from "@server/openApi";
+import { cleanupSiteAssociations } from "@server/lib/rebuildClientAssociations";
+import { usageService } from "@server/lib/billing/usageService";
+import { LimitId } from "@server/lib/billing";
+import {
+    deletePendingAssociatedResourcesForSite,
+    exceedsSiteAssociatedResourceDeleteLimit,
+    getPendingAssociatedResourceCountForSite,
+    runDeleteSiteAssociatedResourcesSideEffects,
+    MAX_SITE_ASSOCIATED_RESOURCES_FOR_BULK_DELETE,
+    type DeleteSiteAssociatedResourcesSideEffects
+} from "@server/lib/deleteSiteAssociatedResources";
+
+const rejectSiteParamsSchema = z.strictObject({
+    siteId: z.coerce.number().int().positive()
+});
+
+registry.registerPath({
+    method: "post",
+    path: "/site/{siteId}/reject",
+    description:
+        "Reject a pending site by deleting it and any associated resources that are still pending.",
+    tags: [OpenAPITags.Site],
+    request: {
+        params: rejectSiteParamsSchema
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
+export async function rejectSite(
+    req: Request,
+    res: Response,
+    next: NextFunction
+): Promise<any> {
+    try {
+        const parsedParams = rejectSiteParamsSchema.safeParse(req.params);
+        if (!parsedParams.success) {
+            return next(
+                createHttpError(
+                    HttpCode.BAD_REQUEST,
+                    fromError(parsedParams.error).toString()
+                )
+            );
+        }
+
+        const { siteId } = parsedParams.data;
+
+        const [site] = await db
+            .select()
+            .from(sites)
+            .where(eq(sites.siteId, siteId))
+            .limit(1);
+
+        if (!site) {
+            return next(
+                createHttpError(
+                    HttpCode.NOT_FOUND,
+                    `Site with ID ${siteId} not found`
+                )
+            );
+        }
+
+        if (!site.orgId) {
+            return next(
+                createHttpError(
+                    HttpCode.BAD_REQUEST,
+                    `Site with ID ${siteId} has no organization`
+                )
+            );
+        }
+
+        const pendingAssociatedResourceCount =
+            await getPendingAssociatedResourceCountForSite(siteId, site.orgId);
+
+        if (
+            exceedsSiteAssociatedResourceDeleteLimit(
+                pendingAssociatedResourceCount
+            )
+        ) {
+            return next(
+                createHttpError(
+                    HttpCode.BAD_REQUEST,
+                    `Cannot reject site and associated pending resources when the site has more than ${MAX_SITE_ASSOCIATED_RESOURCES_FOR_BULK_DELETE} pending resources`
+                )
+            );
+        }
+
+        const [deletedNewt] = await db
+            .select()
+            .from(newts)
+            .where(eq(newts.siteId, siteId))
+            .limit(1);
+
+        let resourceSideEffects: DeleteSiteAssociatedResourcesSideEffects = {
+            resources: [],
+            siteResources: []
+        };
+
+        await db.transaction(async (trx) => {
+            resourceSideEffects = await deletePendingAssociatedResourcesForSite(
+                siteId,
+                site.orgId,
+                trx
+            );
+        });
+
+        await runDeleteSiteAssociatedResourcesSideEffects(resourceSideEffects);
+
+        await db.transaction(async (trx) => {
+            if (site.type == "wireguard") {
+                if (site.pubKey) {
+                    await deletePeer(site.exitNodeId!, site.pubKey);
+                }
+            } else if (site.type == "newt") {
+                await cleanupSiteAssociations(site, trx);
+            }
+
+            await trx.delete(sites).where(eq(sites.siteId, siteId));
+            await usageService.add(site.orgId, LimitId.SITES, -1, trx);
+        });
+
+        if (deletedNewt) {
+            const payload = {
+                type: `newt/wg/terminate`,
+                data: {}
+            };
+            sendToClient(deletedNewt.newtId, payload).catch((error) => {
+                logger.error(
+                    "Failed to send termination message to newt:",
+                    error
+                );
+            });
+        }
+
+        return response(res, {
+            data: null,
+            success: true,
+            error: false,
+            message: "Site rejected successfully",
+            status: HttpCode.OK
+        });
+    } catch (error) {
+        logger.error(error);
+        if (createHttpError.isHttpError(error)) {
+            return next(error);
+        }
+        return next(
+            createHttpError(HttpCode.INTERNAL_SERVER_ERROR, "An error occurred")
+        );
+    }
+}
diff --git a/src/components/PendingSitesTable.tsx b/src/components/PendingSitesTable.tsx
index e2af5ee4e..5981bf387 100644
--- a/src/components/PendingSitesTable.tsx
+++ b/src/components/PendingSitesTable.tsx
@@ -65,7 +65,7 @@ export default function PendingSitesTable({
     const [isRefreshing, startTransition] = useTransition();
     const [approvingIds, setApprovingIds] = useState<Set<number>>(new Set());
     const [rejectingIds, setRejectingIds] = useState<Set<number>>(new Set());
-    const [isDeleteModalOpen, setIsDeleteModalOpen] = useState(false);
+    const [isRejectModalOpen, setIsRejectModalOpen] = useState(false);
     const [selectedSite, setSelectedSite] = useState<SiteRow | null>(null);
 
     const api = createApiClient(useEnvContext());
@@ -136,20 +136,20 @@ export default function PendingSitesTable({
     async function rejectSite(siteId: number) {
         setRejectingIds((prev) => new Set(prev).add(siteId));
         try {
-            await api.delete(`/site/${siteId}`);
+            await api.post(`/site/${siteId}/reject`);
             toast({
                 title: t("success"),
-                description: t("siteDeleted"),
+                description: t("siteRejectSuccess"),
                 variant: "default"
             });
-            setIsDeleteModalOpen(false);
+            setIsRejectModalOpen(false);
             setSelectedSite(null);
             router.refresh();
         } catch (e) {
             toast({
                 variant: "destructive",
-                title: t("siteErrorDelete"),
-                description: formatAxiosError(e, t("siteErrorDelete"))
+                title: t("siteRejectError"),
+                description: formatAxiosError(e, t("siteRejectError"))
             });
         } finally {
             setRejectingIds((prev) => {
@@ -445,7 +445,7 @@ export default function PendingSitesTable({
                             disabled={isApproving || isRejecting}
                             onClick={() => {
                                 setSelectedSite(siteRow);
-                                setIsDeleteModalOpen(true);
+                                setIsRejectModalOpen(true);
                             }}
                         >
                             <X className="mr-2 w-4 h-4" />
@@ -493,23 +493,23 @@ export default function PendingSitesTable({
         <>
             {selectedSite && (
                 <ConfirmDeleteDialog
-                    open={isDeleteModalOpen}
+                    open={isRejectModalOpen}
                     setOpen={(val) => {
-                        setIsDeleteModalOpen(val);
+                        setIsRejectModalOpen(val);
                         if (!val) {
                             setSelectedSite(null);
                         }
                     }}
                     dialog={
                         <div className="space-y-2">
-                            <p>{t("siteQuestionRemove")}</p>
-                            <p>{t("siteMessageRemove")}</p>
+                            <p>{t("siteQuestionReject")}</p>
+                            <p>{t("siteMessageReject")}</p>
                         </div>
                     }
-                    buttonText={t("siteConfirmDelete")}
+                    buttonText={t("siteConfirmReject")}
                     onConfirm={async () => rejectSite(selectedSite.id)}
                     string={selectedSite.name}
-                    title={t("siteDelete")}
+                    title={t("siteReject")}
                 />
             )}
             <ControlledDataTable
diff --git a/src/components/PermissionsSelectBox.tsx b/src/components/PermissionsSelectBox.tsx
index 06d9ff690..48a492c31 100644
--- a/src/components/PermissionsSelectBox.tsx
+++ b/src/components/PermissionsSelectBox.tsx
@@ -55,6 +55,7 @@ function getActionsCategories(root: boolean) {
             [t("actionGetSite")]: "getSite",
             [t("actionListSites")]: "listSites",
             [t("actionUpdateSite")]: "updateSite",
+            [t("actionUpdateSiteApprovals")]: "updateSiteApprovals",
             [t("actionListSiteRoles")]: "listSiteRoles"
         },
 
@@ -78,7 +79,8 @@ function getActionsCategories(root: boolean) {
             [t("actionGetSiteResource")]: "getSiteResource",
             [t("actionListSiteResources")]: "listSiteResources",
             [t("actionUpdateSiteResource")]: "updateSiteResource",
-            [t("actionCreateResourceSessionToken")]: "createResourceSessionToken"
+            [t("actionCreateResourceSessionToken")]:
+                "createResourceSessionToken"
         },
 
         Target: {

From ae0be3a4bc7cf6aca665707a9344dbc96c8b0ce8 Mon Sep 17 00:00:00 2001
From: miloschwartz <mschwartz10612@gmail.com>
Date: Sun, 12 Jul 2026 17:53:57 -0400
Subject: [PATCH 26/94] add resources overview column to pending sites table

---
 src/components/PendingSitesTable.tsx     | 74 ++++++++++++++++++++++++
 src/components/SiteResourcesOverview.tsx | 35 ++++++-----
 2 files changed, 96 insertions(+), 13 deletions(-)

diff --git a/src/components/PendingSitesTable.tsx b/src/components/PendingSitesTable.tsx
index 5981bf387..9e0fa0ad8 100644
--- a/src/components/PendingSitesTable.tsx
+++ b/src/components/PendingSitesTable.tsx
@@ -1,6 +1,16 @@
 "use client";
 
 import ConfirmDeleteDialog from "@app/components/ConfirmDeleteDialog";
+import {
+    Credenza,
+    CredenzaBody,
+    CredenzaContent,
+    CredenzaDescription,
+    CredenzaFooter,
+    CredenzaHeader,
+    CredenzaTitle
+} from "@app/components/Credenza";
+import SiteResourcesOverview from "@app/components/SiteResourcesOverview";
 import { Badge } from "@app/components/ui/badge";
 import { Button } from "@app/components/ui/button";
 import {
@@ -24,6 +34,7 @@ import {
     ArrowUp10Icon,
     ArrowUpRight,
     Check,
+    ChevronDown,
     ChevronsUpDownIcon,
     MoreHorizontal,
     X
@@ -67,6 +78,8 @@ export default function PendingSitesTable({
     const [rejectingIds, setRejectingIds] = useState<Set<number>>(new Set());
     const [isRejectModalOpen, setIsRejectModalOpen] = useState(false);
     const [selectedSite, setSelectedSite] = useState<SiteRow | null>(null);
+    const [resourcesDialogSite, setResourcesDialogSite] =
+        useState<SiteRow | null>(null);
 
     const api = createApiClient(useEnvContext());
     const t = useTranslations();
@@ -342,6 +355,29 @@ export default function PendingSitesTable({
                 }
             }
         },
+        {
+            id: "resources",
+            accessorKey: "resourceCount",
+            friendlyName: t("resources"),
+            header: () => <span className="p-3">{t("resources")}</span>,
+            cell: ({ row }) => {
+                const siteRow = row.original;
+                return (
+                    <Button
+                        type="button"
+                        variant="ghost"
+                        size="sm"
+                        onClick={() => setResourcesDialogSite(siteRow)}
+                        className="flex h-8 items-center gap-2 px-0 font-normal"
+                    >
+                        <span className="text-sm tabular-nums">
+                            {siteRow.resourceCount} {t("resources")}
+                        </span>
+                        <ChevronDown className="h-3 w-3 shrink-0" />
+                    </Button>
+                );
+            }
+        },
         {
             accessorKey: "exitNode",
             friendlyName: t("exitNode"),
@@ -491,6 +527,44 @@ export default function PendingSitesTable({
 
     return (
         <>
+            <Credenza
+                open={Boolean(resourcesDialogSite)}
+                onOpenChange={(open) => {
+                    if (!open) setResourcesDialogSite(null);
+                }}
+            >
+                <CredenzaContent className="md:max-w-7xl">
+                    <CredenzaHeader>
+                        <CredenzaTitle>{t("siteResourcesTab")}</CredenzaTitle>
+                        <CredenzaDescription>
+                            {t("siteResourcesDialogDescription")}
+                        </CredenzaDescription>
+                    </CredenzaHeader>
+                    <CredenzaBody>
+                        {resourcesDialogSite != null && (
+                            <SiteResourcesOverview
+                                orgIdOverride={orgId}
+                                siteId={resourcesDialogSite.id}
+                                initialPublicData={null}
+                                initialPrivateData={null}
+                                initialPublicForbidden={false}
+                                initialPrivateForbidden={false}
+                                showViewAllLinks={false}
+                            />
+                        )}
+                    </CredenzaBody>
+                    <CredenzaFooter>
+                        <Button
+                            type="button"
+                            variant="outline"
+                            onClick={() => setResourcesDialogSite(null)}
+                        >
+                            {t("close")}
+                        </Button>
+                    </CredenzaFooter>
+                </CredenzaContent>
+            </Credenza>
+
             {selectedSite && (
                 <ConfirmDeleteDialog
                     open={isRejectModalOpen}
diff --git a/src/components/SiteResourcesOverview.tsx b/src/components/SiteResourcesOverview.tsx
index d861a870c..7563b6d22 100644
--- a/src/components/SiteResourcesOverview.tsx
+++ b/src/components/SiteResourcesOverview.tsx
@@ -174,8 +174,8 @@ type OverviewRow = {
 type OverviewColumnProps = {
     title: string;
     description: string;
-    viewAllHref: string;
-    viewAllLabel: string;
+    viewAllHref?: string;
+    viewAllLabel?: string;
     emptyLabel: string;
     isForbidden: boolean;
     isFetching: boolean;
@@ -212,12 +212,14 @@ function OverviewColumn({
                         {description}
                     </p>
                 </div>
-                <Link
-                    href={viewAllHref}
-                    className="shrink-0 text-muted-foreground text-sm hover:underline"
-                >
-                    {viewAllLabel}
-                </Link>
+                {viewAllHref && viewAllLabel ? (
+                    <Link
+                        href={viewAllHref}
+                        className="shrink-0 text-muted-foreground text-sm hover:underline"
+                    >
+                        {viewAllLabel}
+                    </Link>
+                ) : null}
             </div>
         </div>
     );
@@ -319,6 +321,8 @@ type SiteResourcesOverviewProps = {
     initialPrivateForbidden: boolean;
     /** When not under `/[orgId]/...` routes, pass org id explicitly (e.g. credenza on sites list). */
     orgIdOverride?: string;
+    /** When false, hides links to the org resources tables filtered by this site. */
+    showViewAllLinks?: boolean;
 };
 
 export default function SiteResourcesOverview({
@@ -327,7 +331,8 @@ export default function SiteResourcesOverview({
     initialPrivateData,
     initialPublicForbidden,
     initialPrivateForbidden,
-    orgIdOverride
+    orgIdOverride,
+    showViewAllLinks = true
 }: SiteResourcesOverviewProps) {
     const t = useTranslations();
     const params = useParams<{ orgId: string }>();
@@ -467,8 +472,10 @@ export default function SiteResourcesOverview({
             key="public"
             title={t("siteResourcesSectionPublic")}
             description={t("siteResourcesSectionPublicDescription")}
-            viewAllHref={publicViewAllHref}
-            viewAllLabel={t("siteResourcesViewAllPublic")}
+            viewAllHref={showViewAllLinks ? publicViewAllHref : undefined}
+            viewAllLabel={
+                showViewAllLinks ? t("siteResourcesViewAllPublic") : undefined
+            }
             emptyLabel={t("siteResourcesEmptyPublic")}
             isForbidden={publicForbidden}
             isFetching={publicQuery.isFetching}
@@ -484,8 +491,10 @@ export default function SiteResourcesOverview({
             key="private"
             title={t("siteResourcesSectionPrivate")}
             description={t("siteResourcesSectionPrivateDescription")}
-            viewAllHref={privateViewAllHref}
-            viewAllLabel={t("siteResourcesViewAllPrivate")}
+            viewAllHref={showViewAllLinks ? privateViewAllHref : undefined}
+            viewAllLabel={
+                showViewAllLinks ? t("siteResourcesViewAllPrivate") : undefined
+            }
             emptyLabel={t("siteResourcesEmptyPrivate")}
             isForbidden={privateForbidden}
             isFetching={privateQuery.isFetching}

From d1b0bbb6d98f6721bdcd8bd52721e5acdd2b1fb1 Mon Sep 17 00:00:00 2001
From: miloschwartz <mschwartz10612@gmail.com>
Date: Wed, 15 Jul 2026 16:05:53 -0400
Subject: [PATCH 27/94] update translations

---
 messages/en-US.json | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/messages/en-US.json b/messages/en-US.json
index 549865dcf..9e2175d53 100644
--- a/messages/en-US.json
+++ b/messages/en-US.json
@@ -472,12 +472,12 @@
     "provisioningKeysSave": "Save the provisioning key",
     "provisioningKeysSaveDescription": "You will only be able to see this once. Copy it to a secure place.",
     "provisioningKeysErrorCreate": "Error creating provisioning key",
-    "provisioningKeysList": "New provisioning key",
-    "provisioningKeysMaxBatchSize": "Max batch size",
+    "provisioningKeysList": "New Provisioning Key",
+    "provisioningKeysMaxBatchSize": "Max Batch Size",
     "provisioningKeysUnlimitedBatchSize": "Unlimited batch size (no limit)",
     "provisioningKeysMaxBatchUnlimited": "Unlimited",
     "provisioningKeysMaxBatchSizeInvalid": "Enter a valid max batch size (1–1,000,000).",
-    "provisioningKeysValidUntil": "Valid until",
+    "provisioningKeysValidUntil": "Valid Until",
     "provisioningKeysValidUntilHint": "Leave empty for no expiration.",
     "provisioningKeysValidUntilInvalid": "Enter a valid date and time.",
     "provisioningKeysNumUsed": "Times used",
@@ -486,7 +486,7 @@
     "provisioningKeysNeverUsed": "Never",
     "provisioningKeysEdit": "Edit Provisioning Key",
     "provisioningKeysEditDescription": "Update the max batch size and expiration time for this key.",
-    "provisioningKeysApproveNewSites": "Approve new sites",
+    "provisioningKeysApproveNewSites": "Approve New Sites",
     "provisioningKeysApproveNewSitesDescription": "Automatically approve sites that register with this key.",
     "provisioningKeysUpdateError": "Error updating provisioning key",
     "provisioningKeysUpdated": "Provisioning key updated",

From d4c602cf917bae495d29a5120515dd8dd6e44d99 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Wed, 15 Jul 2026 17:21:19 -0400
Subject: [PATCH 28/94] Update the counts when deleting resources

---
 server/routers/site/deleteSite.ts | 18 ++++++++++++++++++
 server/routers/site/rejectSite.ts | 18 ++++++++++++++++++
 2 files changed, 36 insertions(+)

diff --git a/server/routers/site/deleteSite.ts b/server/routers/site/deleteSite.ts
index 2126b69d8..6cf584d18 100644
--- a/server/routers/site/deleteSite.ts
+++ b/server/routers/site/deleteSite.ts
@@ -166,6 +166,24 @@ export async function deleteSite(
                     site.orgId,
                     trx
                 );
+
+                if (resourceSideEffects.resources.length > 0) {
+                    await usageService.add(
+                        site.orgId,
+                        LimitId.PUBLIC_RESOURCES,
+                        -resourceSideEffects.resources.length,
+                        trx
+                    );
+                }
+
+                if (resourceSideEffects.siteResources.length > 0) {
+                    await usageService.add(
+                        site.orgId,
+                        LimitId.PRIVATE_RESOURCES,
+                        -resourceSideEffects.siteResources.length,
+                        trx
+                    );
+                }
             });
 
             await runDeleteSiteAssociatedResourcesSideEffects(
diff --git a/server/routers/site/rejectSite.ts b/server/routers/site/rejectSite.ts
index 037879e82..c671dcd79 100644
--- a/server/routers/site/rejectSite.ts
+++ b/server/routers/site/rejectSite.ts
@@ -129,6 +129,24 @@ export async function rejectSite(
                 site.orgId,
                 trx
             );
+
+            if (resourceSideEffects.resources.length > 0) {
+                await usageService.add(
+                    site.orgId,
+                    LimitId.PUBLIC_RESOURCES,
+                    -resourceSideEffects.resources.length,
+                    trx
+                );
+            }
+
+            if (resourceSideEffects.siteResources.length > 0) {
+                await usageService.add(
+                    site.orgId,
+                    LimitId.PRIVATE_RESOURCES,
+                    -resourceSideEffects.siteResources.length,
+                    trx
+                );
+            }
         });
 
         await runDeleteSiteAssociatedResourcesSideEffects(resourceSideEffects);

From a7010b2788821821f587823242041db86a8b7c4f Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Wed, 15 Jul 2026 20:53:51 -0400
Subject: [PATCH 29/94] New translations en-us.json (Spanish)

[ci skip]
---
 messages/es-ES.json | 20 +++++++++++++++-----
 1 file changed, 15 insertions(+), 5 deletions(-)

diff --git a/messages/es-ES.json b/messages/es-ES.json
index 9bc4c83a1..d7453592a 100644
--- a/messages/es-ES.json
+++ b/messages/es-ES.json
@@ -449,8 +449,14 @@
     "provisioningManage": "Aprovisionamiento",
     "provisioningDescription": "Administrar las claves de aprovisionamiento y revisar los sitios pendientes de aprobación.",
     "pendingSites": "Sitios pendientes",
-    "siteApproveSuccess": "Sitio aprobado con éxito",
+    "siteApproveSuccess": "Sitio y recursos asociados aprobados correctamente",
     "siteApproveError": "Error al aprobar el sitio",
+    "siteReject": "Rechazar Sitio",
+    "siteQuestionReject": "¿Está seguro de que desea rechazar este sitio?",
+    "siteMessageReject": "Esto eliminará permanentemente el sitio y cualquier recurso asociado que aún esté pendiente.",
+    "siteConfirmReject": "Confirmar Rechazo del Sitio",
+    "siteRejectSuccess": "Sitio rechazado correctamente",
+    "siteRejectError": "Error al rechazar el sitio",
     "provisioningKeys": "Claves de aprovisionamiento",
     "searchProvisioningKeys": "Buscar claves de suministro...",
     "provisioningKeysAdd": "Generar clave de aprovisionamiento",
@@ -466,12 +472,12 @@
     "provisioningKeysSave": "Guardar la clave de aprovisionamiento",
     "provisioningKeysSaveDescription": "Sólo podrás verlo una vez. Copítalo a un lugar seguro.",
     "provisioningKeysErrorCreate": "Error al crear la clave de provisioning",
-    "provisioningKeysList": "Nueva clave de aprovisionamiento",
-    "provisioningKeysMaxBatchSize": "Tamaño máximo de lote",
+    "provisioningKeysList": "Nueva Clave de Provisión",
+    "provisioningKeysMaxBatchSize": "Tamaño Máximo del Lote",
     "provisioningKeysUnlimitedBatchSize": "Tamaño ilimitado del lote (sin límite)",
     "provisioningKeysMaxBatchUnlimited": "Ilimitado",
     "provisioningKeysMaxBatchSizeInvalid": "Introduzca un tamaño máximo de lote válido (1–1,000,000).",
-    "provisioningKeysValidUntil": "Válido hasta",
+    "provisioningKeysValidUntil": "Válido Hasta",
     "provisioningKeysValidUntilHint": "Dejar vacío para no expirar.",
     "provisioningKeysValidUntilInvalid": "Introduzca una fecha y hora válidas.",
     "provisioningKeysNumUsed": "Tiempos usados",
@@ -480,7 +486,7 @@
     "provisioningKeysNeverUsed": "Nunca",
     "provisioningKeysEdit": "Editar clave de aprovisionamiento",
     "provisioningKeysEditDescription": "Actualizar el tamaño máximo de lote y el tiempo de caducidad para esta clave.",
-    "provisioningKeysApproveNewSites": "Aprobar nuevos sitios",
+    "provisioningKeysApproveNewSites": "Aprobar Nuevos Sitios",
     "provisioningKeysApproveNewSitesDescription": "Aprobar automáticamente los sitios que se registran con esta clave.",
     "provisioningKeysUpdateError": "Error al actualizar la clave de aprovisionamiento",
     "provisioningKeysUpdated": "Clave de aprovisionamiento actualizada",
@@ -1397,6 +1403,7 @@
     "createOrgUser": "Crear usuario Org",
     "actionUpdateOrg": "Actualizar organización",
     "actionRemoveInvitation": "Eliminar invitación",
+    "actionRemoveUserRole": "Quitar Rol de Usuario",
     "actionUpdateUser": "Actualizar usuario",
     "actionGetUser": "Obtener usuario",
     "actionGetOrgUser": "Obtener usuario de la organización",
@@ -1419,6 +1426,8 @@
     "setupTokenDescription": "Ingrese el token de configuración desde la consola del servidor.",
     "setupTokenRequired": "Se requiere el token de configuración",
     "actionUpdateSite": "Actualizar sitio",
+    "actionApproveSite": "Aprobar Sitio",
+    "actionRejectSite": "Rechazar Sitio",
     "actionResetSiteBandwidth": "Restablecer ancho de banda de la organización",
     "actionListSiteRoles": "Lista de roles permitidos del sitio",
     "actionCreateResource": "Crear Recurso",
@@ -1516,6 +1525,7 @@
     "otpAuthDescription": "Introduzca el código de su aplicación de autenticación o uno de sus códigos de copia de seguridad de un solo uso.",
     "otpAuthSubmit": "Enviar código",
     "idpContinue": "O continuar con",
+    "idpLastUsed": "Último Uso",
     "otpAuthBack": "Volver a la contraseña",
     "navbar": "Menú de navegación",
     "navbarDescription": "Menú de navegación principal para la aplicación",

From e497fcc3b94950cfe43fe74edb2233060bdb2596 Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Wed, 15 Jul 2026 20:53:53 -0400
Subject: [PATCH 30/94] New translations en-us.json (Bulgarian)

[ci skip]
---
 messages/bg-BG.json | 18 ++++++++++++++----
 1 file changed, 14 insertions(+), 4 deletions(-)

diff --git a/messages/bg-BG.json b/messages/bg-BG.json
index 2d455afa8..25e192fec 100644
--- a/messages/bg-BG.json
+++ b/messages/bg-BG.json
@@ -449,8 +449,14 @@
     "provisioningManage": "Осигуряване",
     "provisioningDescription": "Управление на ключовете за осигуряване и преглед на чаканещите сайтове за одобрение.",
     "pendingSites": "Чаканещи сайтове",
-    "siteApproveSuccess": "Сайтът е одобрен успешно",
+    "siteApproveSuccess": "Сайтът и свързаните ресурси са одобрени успешно",
     "siteApproveError": "Грешка при одобряването на сайта",
+    "siteReject": "Отказ на сайт",
+    "siteQuestionReject": "Сигурни ли сте, че искате да откажете този сайт?",
+    "siteMessageReject": "Това ще изтрие окончателно сайта и всички свързани ресурси, които все още са на изчакване.",
+    "siteConfirmReject": "Потвърдете отказ на сайт",
+    "siteRejectSuccess": "Сайтът беше успешно отхвърлен",
+    "siteRejectError": "Грешка при отхвърляне на сайта",
     "provisioningKeys": "Ключове за осигуряване",
     "searchProvisioningKeys": "Търсене на ключове за осигуряване...",
     "provisioningKeysAdd": "Генериране на ключ за осигуряване",
@@ -466,8 +472,8 @@
     "provisioningKeysSave": "Запазете ключа за осигуряване",
     "provisioningKeysSaveDescription": "Ще можете да видите това само веднъж. Копирайте го на сигурно място.",
     "provisioningKeysErrorCreate": "Грешка при създаване на ключ за осигуряване",
-    "provisioningKeysList": "Нов ключ за осигуряване",
-    "provisioningKeysMaxBatchSize": "Максимален размер на пакет",
+    "provisioningKeysList": "Нов ключ за разпределяне",
+    "provisioningKeysMaxBatchSize": "Максимален размер на пакета",
     "provisioningKeysUnlimitedBatchSize": "Неограничен размер на партида (без лимит)",
     "provisioningKeysMaxBatchUnlimited": "Неограничено",
     "provisioningKeysMaxBatchSizeInvalid": "Въведете валиден максимален размер на партида (1–1,000,000).",
@@ -480,7 +486,7 @@
     "provisioningKeysNeverUsed": "Никога",
     "provisioningKeysEdit": "Редактиране на ключ за осигуряване",
     "provisioningKeysEditDescription": "Актуализирайте максималния размер на партида и времето на изтичане за този ключ.",
-    "provisioningKeysApproveNewSites": "Одобрете нови сайтове",
+    "provisioningKeysApproveNewSites": "Одобряване на нови сайтове",
     "provisioningKeysApproveNewSitesDescription": "Автоматично одобряване на сайтове, които се регистрират с този ключ.",
     "provisioningKeysUpdateError": "Грешка при актуализирането на ключа за осигуряване",
     "provisioningKeysUpdated": "Ключът за осигуряване е актуализиран",
@@ -1397,6 +1403,7 @@
     "createOrgUser": "Създаване на Организационна Потребител",
     "actionUpdateOrg": "Актуализиране на организацията",
     "actionRemoveInvitation": "Премахване на поканата.",
+    "actionRemoveUserRole": "Премахване на роля на потребител",
     "actionUpdateUser": "Актуализиране на потребител",
     "actionGetUser": "Получаване на потребител",
     "actionGetOrgUser": "Вземете потребител на организация",
@@ -1419,6 +1426,8 @@
     "setupTokenDescription": "Въведете конфигурационния токен от сървърната конзола.",
     "setupTokenRequired": "Необходим е конфигурационен токен",
     "actionUpdateSite": "Актуализиране на сайт",
+    "actionApproveSite": "Одобряване на сайт",
+    "actionRejectSite": "Отказ на сайт",
     "actionResetSiteBandwidth": "Нулиране на честотната лента на организацията",
     "actionListSiteRoles": "Изброяване на позволените роли за сайта",
     "actionCreateResource": "Създаване на ресурс",
@@ -1516,6 +1525,7 @@
     "otpAuthDescription": "Въведете кода от приложението за удостоверяване или един от вашите резервни кодове за еднократна употреба.",
     "otpAuthSubmit": "Изпрати код",
     "idpContinue": "Или продължете със",
+    "idpLastUsed": "Последно използвано",
     "otpAuthBack": "Назад към парола",
     "navbar": "Навигационно меню",
     "navbarDescription": "Главно навигационно меню за приложението",

From 8d1f5e1096946b11031120440dd99b00c1c63556 Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Wed, 15 Jul 2026 20:53:55 -0400
Subject: [PATCH 31/94] New translations en-us.json (Czech)

[ci skip]
---
 messages/cs-CZ.json | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/messages/cs-CZ.json b/messages/cs-CZ.json
index f456ee3b9..f440a8e38 100644
--- a/messages/cs-CZ.json
+++ b/messages/cs-CZ.json
@@ -449,8 +449,14 @@
     "provisioningManage": "Zajištění",
     "provisioningDescription": "Spravovat klíče pro nastavení a zkontrolovat čekající stránky čekající na schválení.",
     "pendingSites": "Nevyřízené weby",
-    "siteApproveSuccess": "Web byl úspěšně schválen",
+    "siteApproveSuccess": "Stránka a přidružené zdroje byly úspěšně schváleny",
     "siteApproveError": "Chyba při schvalování webu",
+    "siteReject": "Odmítnout stránku",
+    "siteQuestionReject": "Opravdu chcete tuto stránku odmítnout?",
+    "siteMessageReject": "Toto trvale odstraní stránku a všechny přidružené zdroje, které jsou stále nevyřízené.",
+    "siteConfirmReject": "Potvrdit odmítnutí stránky",
+    "siteRejectSuccess": "Stránka byla úspěšně odmítnuta",
+    "siteRejectError": "Chyba při odmítání stránky",
     "provisioningKeys": "Poskytovací klíče",
     "searchProvisioningKeys": "Hledat klíče k zajišťování...",
     "provisioningKeysAdd": "Generovat zajišťovací klíč",
@@ -466,12 +472,12 @@
     "provisioningKeysSave": "Uložit konfigurační klíč",
     "provisioningKeysSaveDescription": "Toto můžete vidět pouze jednou. Zkopírujte ho na bezpečné místo.",
     "provisioningKeysErrorCreate": "Chyba při vytváření doplňovacího klíče",
-    "provisioningKeysList": "Nový klíč pro poskytování informací",
+    "provisioningKeysList": "Nový provisioning klíč",
     "provisioningKeysMaxBatchSize": "Maximální velikost dávky",
     "provisioningKeysUnlimitedBatchSize": "Neomezená velikost šarže (bez omezení)",
     "provisioningKeysMaxBatchUnlimited": "Bez omezení",
     "provisioningKeysMaxBatchSizeInvalid": "Zadejte platnou maximální velikost šarže (1–1,000,000).",
-    "provisioningKeysValidUntil": "Platné do",
+    "provisioningKeysValidUntil": "Platná do",
     "provisioningKeysValidUntilHint": "Ponechte prázdné, pokud vyprší platnost.",
     "provisioningKeysValidUntilInvalid": "Zadejte platné datum a čas.",
     "provisioningKeysNumUsed": "Časy použití",
@@ -1397,6 +1403,7 @@
     "createOrgUser": "Vytvořit Org uživatele",
     "actionUpdateOrg": "Aktualizovat organizaci",
     "actionRemoveInvitation": "Odstranit pozvání",
+    "actionRemoveUserRole": "Odstranit uživatelskou roli",
     "actionUpdateUser": "Aktualizovat uživatele",
     "actionGetUser": "Získat uživatele",
     "actionGetOrgUser": "Získat uživatele organizace",
@@ -1419,6 +1426,8 @@
     "setupTokenDescription": "Zadejte nastavovací token z konzole serveru.",
     "setupTokenRequired": "Je vyžadován token nastavení",
     "actionUpdateSite": "Aktualizovat stránku",
+    "actionApproveSite": "Schválit stránku",
+    "actionRejectSite": "Odmítnout stránku",
     "actionResetSiteBandwidth": "Resetovat šířku pásma organizace",
     "actionListSiteRoles": "Seznam povolených rolí webu",
     "actionCreateResource": "Vytvořit zdroj",
@@ -1516,6 +1525,7 @@
     "otpAuthDescription": "Zadejte kód z vaší autentizační aplikace nebo jeden z vlastních záložních kódů.",
     "otpAuthSubmit": "Odeslat kód",
     "idpContinue": "Nebo pokračovat s",
+    "idpLastUsed": "Naposled použito",
     "otpAuthBack": "Zpět na heslo",
     "navbar": "Navigation Menu",
     "navbarDescription": "Hlavní navigační menu aplikace",

From 00f7510195109633cb7c8ff86b3a7ac1065743a9 Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Wed, 15 Jul 2026 20:53:57 -0400
Subject: [PATCH 32/94] New translations en-us.json (Danish)

[ci skip]
---
 messages/da-DK.json | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/messages/da-DK.json b/messages/da-DK.json
index ce08bff23..2e1376264 100644
--- a/messages/da-DK.json
+++ b/messages/da-DK.json
@@ -449,8 +449,14 @@
     "provisioningManage": "Provisionering",
     "provisioningDescription": "Administrer provisioneringsnøgler og gennemgå ventende sites som venter på godkendelse.",
     "pendingSites": "Ventende sites",
-    "siteApproveSuccess": "Med succes godkendelse af site",
+    "siteApproveSuccess": "Site og tilknyttede ressourcer godkendt med succes",
     "siteApproveError": "Fejl ved godkendelse af side",
+    "siteReject": "Afvis Site",
+    "siteQuestionReject": "Er du sikker på, at du vil afvise dette site?",
+    "siteMessageReject": "Dette vil permanent slette sitet og enhver tilknyttet ressource, der stadig er i afventning.",
+    "siteConfirmReject": "Bekræft Afvis Site",
+    "siteRejectSuccess": "Site afvist med succes",
+    "siteRejectError": "Fejl ved afvisning af sitet",
     "provisioningKeys": "Provisioneringsnøgler",
     "searchProvisioningKeys": "Søg varer i provisioneringsnøgler...",
     "provisioningKeysAdd": "Generer provisioneringsnøgle",
@@ -467,7 +473,7 @@
     "provisioningKeysSaveDescription": "Du kan kun se denne én gang. Kopiér det til et sikkert sted.",
     "provisioningKeysErrorCreate": "Fejl under oprettelse af provisioneringsnøgle",
     "provisioningKeysList": "Ny provisioneringsnøgle",
-    "provisioningKeysMaxBatchSize": "Maks størrelse på bunt",
+    "provisioningKeysMaxBatchSize": "Maksimum Batch Størrelse",
     "provisioningKeysUnlimitedBatchSize": "Ubegrænset mengde bunt (ingen begrænsning)",
     "provisioningKeysMaxBatchUnlimited": "Ubegrænset",
     "provisioningKeysMaxBatchSizeInvalid": "Angiv en gyldig sjakkstørrelse (1–1 000.000).",
@@ -1397,6 +1403,7 @@
     "createOrgUser": "Opret organisationsbruger",
     "actionUpdateOrg": "Opdater organisation",
     "actionRemoveInvitation": "Fjern invitation",
+    "actionRemoveUserRole": "Fjern Brugers Rolle",
     "actionUpdateUser": "Opdater bruger",
     "actionGetUser": "Hent bruger",
     "actionGetOrgUser": "Hent organisationsbruger",
@@ -1419,6 +1426,8 @@
     "setupTokenDescription": "Indtast opsætningstoken fra serverkonsollen.",
     "setupTokenRequired": "Opsætningstoken er nødvendig",
     "actionUpdateSite": "Opdater site",
+    "actionApproveSite": "Godkend Site",
+    "actionRejectSite": "Afvis Site",
     "actionResetSiteBandwidth": "Nulstil organisationsbåndbredde",
     "actionListSiteRoles": "Vis tilladte områderoller",
     "actionCreateResource": "Opret ressource",
@@ -1516,6 +1525,7 @@
     "otpAuthDescription": "Indtast koden fra autentiseringsappen din eller en af dine engangs reservekoder.",
     "otpAuthSubmit": "Send kode",
     "idpContinue": "Eller fortsæt med",
+    "idpLastUsed": "Sidst brugt",
     "otpAuthBack": "Tilbage til adgangskode",
     "navbar": "Navigationsmenu",
     "navbarDescription": "Hovednavigasjonsmeny for applikationen",

From e6646e5833ded21fd6cd5d6b22ad1dfd15c2847a Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Wed, 15 Jul 2026 20:53:59 -0400
Subject: [PATCH 33/94] New translations en-us.json (German)

[ci skip]
---
 messages/de-DE.json | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/messages/de-DE.json b/messages/de-DE.json
index dc7dbb808..3ceac6dc4 100644
--- a/messages/de-DE.json
+++ b/messages/de-DE.json
@@ -449,8 +449,14 @@
     "provisioningManage": "Bereitstellung",
     "provisioningDescription": "Bereitstellungsschlüssel verwalten und ausstehende Standorte prüfen, die noch auf Genehmigung warten.",
     "pendingSites": "Ausstehende Standorte",
-    "siteApproveSuccess": "Standort erfolgreich freigegeben",
+    "siteApproveSuccess": "Site und zugehörige Ressourcen erfolgreich genehmigt",
     "siteApproveError": "Fehler beim Genehmigen des Standorts",
+    "siteReject": "Site ablehnen",
+    "siteQuestionReject": "Sind Sie sicher, dass Sie diese Site ablehnen möchten?",
+    "siteMessageReject": "Dies wird die Site und alle damit verbundenen, noch ausstehenden Ressourcen dauerhaft löschen.",
+    "siteConfirmReject": "Ablehnung der Site bestätigen",
+    "siteRejectSuccess": "Site erfolgreich abgelehnt",
+    "siteRejectError": "Fehler beim Ablehnen der Site",
     "provisioningKeys": "Bereitstellungsschlüssel",
     "searchProvisioningKeys": "Bereitstellungsschlüssel suchen...",
     "provisioningKeysAdd": "Bereitstellungsschlüssel generieren",
@@ -467,7 +473,7 @@
     "provisioningKeysSaveDescription": "Sie können dies nur einmal sehen. Kopieren Sie es an einen sicheren Ort.",
     "provisioningKeysErrorCreate": "Fehler beim Erstellen des Bereitstellungsschlüssels",
     "provisioningKeysList": "Neuer Bereitstellungsschlüssel",
-    "provisioningKeysMaxBatchSize": "Max. Batch-Größe",
+    "provisioningKeysMaxBatchSize": "Maximale Batch-Größe",
     "provisioningKeysUnlimitedBatchSize": "Unbegrenzte Batch-Größe (kein Limit)",
     "provisioningKeysMaxBatchUnlimited": "Unbegrenzt",
     "provisioningKeysMaxBatchSizeInvalid": "Geben Sie eine gültige maximale Batchgröße ein (1–1.000.000).",
@@ -480,7 +486,7 @@
     "provisioningKeysNeverUsed": "Nie",
     "provisioningKeysEdit": "Bereitstellungsschlüssel bearbeiten",
     "provisioningKeysEditDescription": "Aktualisieren Sie die maximale Batch-Größe und Ablaufzeit für diesen Schlüssel.",
-    "provisioningKeysApproveNewSites": "Neuen Standort genehmigen",
+    "provisioningKeysApproveNewSites": "Neue Sites genehmigen",
     "provisioningKeysApproveNewSitesDescription": "Sites, die sich mit diesem Schlüssel registrieren, automatisch freigeben.",
     "provisioningKeysUpdateError": "Fehler beim Aktualisieren des Bereitstellungsschlüssels",
     "provisioningKeysUpdated": "Bereitstellungsschlüssel aktualisiert",
@@ -1397,6 +1403,7 @@
     "createOrgUser": "Org Benutzer erstellen",
     "actionUpdateOrg": "Organisation aktualisieren",
     "actionRemoveInvitation": "Einladung entfernen",
+    "actionRemoveUserRole": "Benutzerrolle entfernen",
     "actionUpdateUser": "Benutzer aktualisieren",
     "actionGetUser": "Benutzer abrufen",
     "actionGetOrgUser": "Organisationsbenutzer abrufen",
@@ -1419,6 +1426,8 @@
     "setupTokenDescription": "Geben Sie das Setup-Token von der Serverkonsole ein.",
     "setupTokenRequired": "Setup-Token ist erforderlich",
     "actionUpdateSite": "Standorte aktualisieren",
+    "actionApproveSite": "Site genehmigen",
+    "actionRejectSite": "Site ablehnen",
     "actionResetSiteBandwidth": "Organisations-Bandbreite zurücksetzen",
     "actionListSiteRoles": "Erlaubte Standort-Rollen auflisten",
     "actionCreateResource": "Ressource erstellen",
@@ -1516,6 +1525,7 @@
     "otpAuthDescription": "Geben Sie den Code aus Ihrer Authenticator-App oder einen Ihrer einmaligen Backup-Codes ein.",
     "otpAuthSubmit": "Code absenden",
     "idpContinue": "Oder weiter mit",
+    "idpLastUsed": "Zuletzt verwendet",
     "otpAuthBack": "Zurück zum Passwort",
     "navbar": "Navigationsmenü",
     "navbarDescription": "Hauptnavigationsmenü für die Anwendung",

From cebbf9ca65c27f7a470c945a2fa47d27816dcab4 Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Wed, 15 Jul 2026 20:54:00 -0400
Subject: [PATCH 34/94] New translations en-us.json (Italian)

[ci skip]
---
 messages/it-IT.json | 20 +++++++++++++++-----
 1 file changed, 15 insertions(+), 5 deletions(-)

diff --git a/messages/it-IT.json b/messages/it-IT.json
index ebb398334..5edde2e2e 100644
--- a/messages/it-IT.json
+++ b/messages/it-IT.json
@@ -449,8 +449,14 @@
     "provisioningManage": "Accantonamento",
     "provisioningDescription": "Gestire le chiavi di provisioning e rivedere i siti in attesa di approvazione.",
     "pendingSites": "Siti In Attesa",
-    "siteApproveSuccess": "Sito approvato con successo",
+    "siteApproveSuccess": "Sito e risorse associate approvate con successo",
     "siteApproveError": "Errore nell'approvazione del sito",
+    "siteReject": "Rifiuta Sito",
+    "siteQuestionReject": "Sei sicuro di voler rifiutare questo sito?",
+    "siteMessageReject": "Questo eliminerà permanentemente il sito e tutte le risorse associate ancora in sospeso.",
+    "siteConfirmReject": "Conferma Rifiuto Sito",
+    "siteRejectSuccess": "Sito rifiutato con successo",
+    "siteRejectError": "Errore nel rifiutare il sito",
     "provisioningKeys": "Chiavi Di Provvedimento",
     "searchProvisioningKeys": "Cerca le chiavi di provisioning...",
     "provisioningKeysAdd": "Genera Chiave di provisioning",
@@ -466,12 +472,12 @@
     "provisioningKeysSave": "Salva la chiave di provisioning",
     "provisioningKeysSaveDescription": "Sarai in grado di vedere solo una volta. Copiarlo in un posto sicuro.",
     "provisioningKeysErrorCreate": "Errore nella creazione della chiave di provisioning",
-    "provisioningKeysList": "Nuova chiave di provisioning",
-    "provisioningKeysMaxBatchSize": "Dimensione massima batch",
+    "provisioningKeysList": "Nuova Chiave di Provisioning",
+    "provisioningKeysMaxBatchSize": "Dimensione Massima Batch",
     "provisioningKeysUnlimitedBatchSize": "Dimensione illimitata del batch (nessun limite)",
     "provisioningKeysMaxBatchUnlimited": "Illimitato",
     "provisioningKeysMaxBatchSizeInvalid": "Inserisci una dimensione massima valida del batch (1–1.000.000).",
-    "provisioningKeysValidUntil": "Valido fino al",
+    "provisioningKeysValidUntil": "Valido Fino a",
     "provisioningKeysValidUntilHint": "Lasciare vuoto per nessuna scadenza.",
     "provisioningKeysValidUntilInvalid": "Inserisci una data e ora valide.",
     "provisioningKeysNumUsed": "Volte usate",
@@ -480,7 +486,7 @@
     "provisioningKeysNeverUsed": "Mai",
     "provisioningKeysEdit": "Modifica Chiave di provisioning",
     "provisioningKeysEditDescription": "Aggiorna la dimensione massima del batch e il tempo di scadenza per questa chiave.",
-    "provisioningKeysApproveNewSites": "Approva nuovi siti",
+    "provisioningKeysApproveNewSites": "Approva Nuovi Siti",
     "provisioningKeysApproveNewSitesDescription": "Approvare automaticamente i siti che si registrano con questa chiave.",
     "provisioningKeysUpdateError": "Errore nell'aggiornamento della chiave di provisioning",
     "provisioningKeysUpdated": "Chiave di provisioning aggiornata",
@@ -1397,6 +1403,7 @@
     "createOrgUser": "Crea Utente Org",
     "actionUpdateOrg": "Aggiorna Organizzazione",
     "actionRemoveInvitation": "Rimuovi Invito",
+    "actionRemoveUserRole": "Rimuovi Ruolo Utente",
     "actionUpdateUser": "Aggiorna Utente",
     "actionGetUser": "Ottieni Utente",
     "actionGetOrgUser": "Ottieni Utente Organizzazione",
@@ -1419,6 +1426,8 @@
     "setupTokenDescription": "Inserisci il token di configurazione dalla console del server.",
     "setupTokenRequired": "Il token di configurazione è richiesto",
     "actionUpdateSite": "Aggiorna Sito",
+    "actionApproveSite": "Approva Sito",
+    "actionRejectSite": "Rifiuta Sito",
     "actionResetSiteBandwidth": "Reimposta Larghezza Banda Dell'Organizzazione",
     "actionListSiteRoles": "Elenca Ruoli Sito Consentiti",
     "actionCreateResource": "Crea Risorsa",
@@ -1516,6 +1525,7 @@
     "otpAuthDescription": "Inserisci il codice dalla tua app di autenticazione o uno dei tuoi codici di backup monouso.",
     "otpAuthSubmit": "Invia Codice",
     "idpContinue": "O continua con",
+    "idpLastUsed": "Ultimo Utilizzo",
     "otpAuthBack": "Torna alla Password",
     "navbar": "Menu di Navigazione",
     "navbarDescription": "Menu di navigazione principale dell'applicazione",

From 6c1e1bc0ca576fafc311c4cde782d1c7344cec46 Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Wed, 15 Jul 2026 20:54:02 -0400
Subject: [PATCH 35/94] New translations en-us.json (Korean)

[ci skip]
---
 messages/ko-KR.json | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/messages/ko-KR.json b/messages/ko-KR.json
index d8c929ead..67c0ee59f 100644
--- a/messages/ko-KR.json
+++ b/messages/ko-KR.json
@@ -449,8 +449,14 @@
     "provisioningManage": "프로비저닝",
     "provisioningDescription": "프로비저닝 키를 관리하고 승인을 기다리는 사이트를 검토합니다.",
     "pendingSites": "대기중인 사이트",
-    "siteApproveSuccess": "사이트가 성공적으로 승인되었습니다",
+    "siteApproveSuccess": "사이트 및 관련 리소스가 성공적으로 승인되었습니다",
     "siteApproveError": "사이트 승인 오류",
+    "siteReject": "사이트 거부",
+    "siteQuestionReject": "이 사이트를 거부하시겠습니까?",
+    "siteMessageReject": "이렇게 하면 펜딩 중인 사이트 및 관련 리소스가 영구적으로 삭제됩니다.",
+    "siteConfirmReject": "사이트 거부 확인",
+    "siteRejectSuccess": "사이트가 성공적으로 거부되었습니다",
+    "siteRejectError": "사이트 거부 오류",
     "provisioningKeys": "프로비저닝 키",
     "searchProvisioningKeys": "프로비저닝 키 검색...",
     "provisioningKeysAdd": "프로비저닝 키 생성",
@@ -480,7 +486,7 @@
     "provisioningKeysNeverUsed": "절대",
     "provisioningKeysEdit": "프로비저닝 키 수정",
     "provisioningKeysEditDescription": "이 키의 최대 배치 크기 및 만료 시간을 업데이트하세요.",
-    "provisioningKeysApproveNewSites": "새로운 사이트 승인",
+    "provisioningKeysApproveNewSites": "새 사이트 승인",
     "provisioningKeysApproveNewSitesDescription": "이 키를 등록하는 사이트를 자동으로 승인합니다.",
     "provisioningKeysUpdateError": "프로비저닝 키 업데이트 오류",
     "provisioningKeysUpdated": "프로비저닝 키가 업데이트되었습니다",
@@ -1397,6 +1403,7 @@
     "createOrgUser": "조직 사용자 생성",
     "actionUpdateOrg": "조직 업데이트",
     "actionRemoveInvitation": "초대 제거",
+    "actionRemoveUserRole": "사용자 역할 제거",
     "actionUpdateUser": "사용자 업데이트",
     "actionGetUser": "사용자 조회",
     "actionGetOrgUser": "조직 사용자 가져오기",
@@ -1419,6 +1426,8 @@
     "setupTokenDescription": "서버 콘솔에서 설정 토큰 입력.",
     "setupTokenRequired": "설정 토큰이 필요합니다",
     "actionUpdateSite": "사이트 업데이트",
+    "actionApproveSite": "사이트 승인",
+    "actionRejectSite": "사이트 거부",
     "actionResetSiteBandwidth": "조직 대역폭 재설정",
     "actionListSiteRoles": "허용된 사이트 역할 목록",
     "actionCreateResource": "리소스 생성",
@@ -1516,6 +1525,7 @@
     "otpAuthDescription": "인증 앱에서 코드를 입력하거나 단일 사용 백업 코드 중 하나를 입력하세요.",
     "otpAuthSubmit": "코드 제출",
     "idpContinue": "또는 계속 진행하십시오.",
+    "idpLastUsed": "마지막 사용",
     "otpAuthBack": "비밀번호로 돌아가기",
     "navbar": "탐색 메뉴",
     "navbarDescription": "애플리케이션의 주요 탐색 메뉴",

From 40e05f903a8ace9d1de4e80c3ac78a1043518305 Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Wed, 15 Jul 2026 20:54:04 -0400
Subject: [PATCH 36/94] New translations en-us.json (Dutch)

[ci skip]
---
 messages/nl-NL.json | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/messages/nl-NL.json b/messages/nl-NL.json
index 506a4a5b3..9239cd81c 100644
--- a/messages/nl-NL.json
+++ b/messages/nl-NL.json
@@ -449,8 +449,14 @@
     "provisioningManage": "Provisie",
     "provisioningDescription": "Voorzieningssleutels beheren en sites beoordelen in afwachting van goedkeuring.",
     "pendingSites": "Openstaande sites",
-    "siteApproveSuccess": "Site succesvol goedgekeurd",
+    "siteApproveSuccess": "Site en bijbehorende middelen succesvol goedgekeurd",
     "siteApproveError": "Fout bij goedkeuren website",
+    "siteReject": "Afwijzen Site",
+    "siteQuestionReject": "Weet u zeker dat u deze site wilt afwijzen?",
+    "siteMessageReject": "Hiermee wordt de site en alle bijbehorende middelen die nog in behandeling zijn permanent verwijderd.",
+    "siteConfirmReject": "Afwijzing van site bevestigen",
+    "siteRejectSuccess": "Site succesvol afgewezen",
+    "siteRejectError": "Fout bij het afwijzen van site",
     "provisioningKeys": "Verhelderende sleutels",
     "searchProvisioningKeys": "Zoek provisioningsleutels ...",
     "provisioningKeysAdd": "Genereer Provisioning Sleutel",
@@ -466,7 +472,7 @@
     "provisioningKeysSave": "Sla de provisioning sleutel op",
     "provisioningKeysSaveDescription": "Je kunt dit slechts één keer zien. Kopieer het naar een veilige plaats.",
     "provisioningKeysErrorCreate": "Fout bij aanmaken provisioning sleutel",
-    "provisioningKeysList": "Nieuwe provisioning sleutel",
+    "provisioningKeysList": "Nieuwe provisioning-sleutel",
     "provisioningKeysMaxBatchSize": "Maximale batchgrootte",
     "provisioningKeysUnlimitedBatchSize": "Onbeperkte batchgrootte (geen limiet)",
     "provisioningKeysMaxBatchUnlimited": "Onbeperkt",
@@ -480,7 +486,7 @@
     "provisioningKeysNeverUsed": "Nooit",
     "provisioningKeysEdit": "Wijzig Provisioning Sleutel",
     "provisioningKeysEditDescription": "Werk de maximale batchgrootte en verlooptijd voor deze sleutel bij.",
-    "provisioningKeysApproveNewSites": "Goedkeuren van nieuwe sites",
+    "provisioningKeysApproveNewSites": "Nieuwe sites goedkeuren",
     "provisioningKeysApproveNewSitesDescription": "Automatisch sites goedkeuren die zich registreren met deze sleutel.",
     "provisioningKeysUpdateError": "Fout tijdens bijwerken provisioning sleutel",
     "provisioningKeysUpdated": "Provisie sleutel bijgewerkt",
@@ -1397,6 +1403,7 @@
     "createOrgUser": "Org gebruiker aanmaken",
     "actionUpdateOrg": "Organisatie bijwerken",
     "actionRemoveInvitation": "Verwijder uitnodiging",
+    "actionRemoveUserRole": "Gebruikersrol verwijderen",
     "actionUpdateUser": "Gebruiker bijwerken",
     "actionGetUser": "Gebruiker ophalen",
     "actionGetOrgUser": "Krijg organisatie-gebruiker",
@@ -1419,6 +1426,8 @@
     "setupTokenDescription": "Voer het setup-token in vanaf de serverconsole.",
     "setupTokenRequired": "Setup-token is vereist",
     "actionUpdateSite": "Site bijwerken",
+    "actionApproveSite": "Verleen site goedkeuring",
+    "actionRejectSite": "Afwijzen Site",
     "actionResetSiteBandwidth": "Reset organisatieschandbreedte",
     "actionListSiteRoles": "Toon toegestane sitenollen",
     "actionCreateResource": "Bron maken",
@@ -1516,6 +1525,7 @@
     "otpAuthDescription": "Voer de code van je authenticator-app of een van je reservekopiecodes voor het eenmalig gebruik in.",
     "otpAuthSubmit": "Code indienen",
     "idpContinue": "Of ga verder met",
+    "idpLastUsed": "Laatst gebruikt",
     "otpAuthBack": "Terug naar wachtwoord",
     "navbar": "Navigatiemenu",
     "navbarDescription": "Hoofd navigatie menu voor de applicatie",

From 22a5743817effe1d82370fbf9a74ce28f9193de6 Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Wed, 15 Jul 2026 20:54:06 -0400
Subject: [PATCH 37/94] New translations en-us.json (Polish)

[ci skip]
---
 messages/pl-PL.json | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/messages/pl-PL.json b/messages/pl-PL.json
index 718579932..11df1b353 100644
--- a/messages/pl-PL.json
+++ b/messages/pl-PL.json
@@ -449,8 +449,14 @@
     "provisioningManage": "Dostarczanie",
     "provisioningDescription": "Zarządzaj kluczami rezerwacji i sprawdzaj oczekujące strony oczekujące na zatwierdzenie.",
     "pendingSites": "Witryny oczekujące",
-    "siteApproveSuccess": "Witryna została pomyślnie zatwierdzona",
+    "siteApproveSuccess": "Witryna i powiązane zasoby zostały zatwierdzone pomyślnie",
     "siteApproveError": "Błąd zatwierdzania witryny",
+    "siteReject": "Odrzuć witrynę",
+    "siteQuestionReject": "Czy na pewno chcesz odrzucić tę witrynę?",
+    "siteMessageReject": "Spowoduje to trwałe usunięcie witryny i wszelkich powiązanych, nadal oczekujących zasobów.",
+    "siteConfirmReject": "Potwierdź odrzucenie witryny",
+    "siteRejectSuccess": "Witryna została odrzucona pomyślnie",
+    "siteRejectError": "Błąd podczas odrzucania witryny",
     "provisioningKeys": "Klucze Zaopatrzenia",
     "searchProvisioningKeys": "Szukaj kluczy zaopatrzenia...",
     "provisioningKeysAdd": "Wygeneruj klucz zaopatrzenia",
@@ -466,7 +472,7 @@
     "provisioningKeysSave": "Zapisz klucz zaopatrzenia",
     "provisioningKeysSaveDescription": "Możesz to zobaczyć tylko raz. Skopiuj je do bezpiecznego miejsca.",
     "provisioningKeysErrorCreate": "Błąd podczas tworzenia klucza zaopatrzenia",
-    "provisioningKeysList": "Nowy klucz rezerwacji",
+    "provisioningKeysList": "Nowy klucz aprowizacyjny",
     "provisioningKeysMaxBatchSize": "Maksymalny rozmiar partii",
     "provisioningKeysUnlimitedBatchSize": "Nieograniczony rozmiar partii (bez limitu)",
     "provisioningKeysMaxBatchUnlimited": "Nieograniczona",
@@ -1397,6 +1403,7 @@
     "createOrgUser": "Utwórz użytkownika Org",
     "actionUpdateOrg": "Aktualizuj organizację",
     "actionRemoveInvitation": "Usuń zaproszenie",
+    "actionRemoveUserRole": "Usuń rolę użytkownika",
     "actionUpdateUser": "Zaktualizuj użytkownika",
     "actionGetUser": "Pobierz użytkownika",
     "actionGetOrgUser": "Pobierz użytkownika organizacji",
@@ -1419,6 +1426,8 @@
     "setupTokenDescription": "Wprowadź token konfiguracji z konsoli serwera.",
     "setupTokenRequired": "Wymagany jest token konfiguracji",
     "actionUpdateSite": "Aktualizuj witrynę",
+    "actionApproveSite": "Zatwierdź witrynę",
+    "actionRejectSite": "Odrzuć witrynę",
     "actionResetSiteBandwidth": "Zresetuj przepustowość organizacji",
     "actionListSiteRoles": "Lista dozwolonych ról witryny",
     "actionCreateResource": "Utwórz zasób",
@@ -1516,6 +1525,7 @@
     "otpAuthDescription": "Wprowadź kod z aplikacji uwierzytelniającej lub jeden z jednorazowych kodów zapasowych.",
     "otpAuthSubmit": "Wyślij kod",
     "idpContinue": "Lub kontynuuj z",
+    "idpLastUsed": "Ostatnio używany",
     "otpAuthBack": "Powrót do hasła",
     "navbar": "Menu nawigacyjne",
     "navbarDescription": "Główne menu nawigacyjne aplikacji",

From 4e5fd2f2b069a1f848b189a65cb8571dee07e0de Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Wed, 15 Jul 2026 20:54:08 -0400
Subject: [PATCH 38/94] New translations en-us.json (French)

[ci skip]
---
 messages/fr-FR.json | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/messages/fr-FR.json b/messages/fr-FR.json
index 4084ceae8..ec24ec4d1 100644
--- a/messages/fr-FR.json
+++ b/messages/fr-FR.json
@@ -449,8 +449,14 @@
     "provisioningManage": "Mise en place",
     "provisioningDescription": "Gérer les clés de provisioning et examiner les sites en attente d'approbation.",
     "pendingSites": "Sites en attente",
-    "siteApproveSuccess": "Site approuvé avec succès",
+    "siteApproveSuccess": "Site et ressources associées approuvés avec succès",
     "siteApproveError": "Erreur lors de l'approbation du site",
+    "siteReject": "Rejeter le site",
+    "siteQuestionReject": "Êtes-vous sûr de vouloir rejeter ce site ?",
+    "siteMessageReject": "Cela supprimera définitivement le site et toutes les ressources associées qui sont encore en attente.",
+    "siteConfirmReject": "Confirmer le rejet du site",
+    "siteRejectSuccess": "Site rejeté avec succès",
+    "siteRejectError": "Erreur lors du rejet du site",
     "provisioningKeys": "Clés de provisionnement",
     "searchProvisioningKeys": "Recherche des clés de provision...",
     "provisioningKeysAdd": "Générer une clé de provisioning",
@@ -466,12 +472,12 @@
     "provisioningKeysSave": "Enregistrer la clé de provisioning",
     "provisioningKeysSaveDescription": "Vous ne pourrez voir cela qu'une seule fois. Copiez-le dans un endroit sécurisé.",
     "provisioningKeysErrorCreate": "Erreur lors de la création de la clé de provisioning",
-    "provisioningKeysList": "Nouvelle clé de provisioning",
+    "provisioningKeysList": "Nouvelle clé d'approvisionnement",
     "provisioningKeysMaxBatchSize": "Taille maximale du lot",
     "provisioningKeysUnlimitedBatchSize": "Taille de lot illimitée (sans limite)",
     "provisioningKeysMaxBatchUnlimited": "Illimité",
     "provisioningKeysMaxBatchSizeInvalid": "Entrez une taille de lot maximale valide (1–1 000 000).",
-    "provisioningKeysValidUntil": "Valable jusqu'au",
+    "provisioningKeysValidUntil": "Valable jusqu'à",
     "provisioningKeysValidUntilHint": "Laisser vide pour ne pas expirer.",
     "provisioningKeysValidUntilInvalid": "Entrez une date et une heure valides.",
     "provisioningKeysNumUsed": "Nombre de fois utilisées",
@@ -1397,6 +1403,7 @@
     "createOrgUser": "Créer un utilisateur Org",
     "actionUpdateOrg": "Mettre à jour l'organisation",
     "actionRemoveInvitation": "Supprimer l'invitation",
+    "actionRemoveUserRole": "Supprimer le rôle d'utilisateur",
     "actionUpdateUser": "Mettre à jour l'utilisateur",
     "actionGetUser": "Obtenir l'utilisateur",
     "actionGetOrgUser": "Obtenir l'utilisateur de l'organisation",
@@ -1419,6 +1426,8 @@
     "setupTokenDescription": "Entrez le jeton de configuration depuis la console du serveur.",
     "setupTokenRequired": "Le jeton de configuration est requis.",
     "actionUpdateSite": "Mettre à jour un site",
+    "actionApproveSite": "Approuver le site",
+    "actionRejectSite": "Rejeter le site",
     "actionResetSiteBandwidth": "Réinitialiser la bande passante de l'organisation",
     "actionListSiteRoles": "Lister les rôles autorisés du site",
     "actionCreateResource": "Créer une ressource",
@@ -1516,6 +1525,7 @@
     "otpAuthDescription": "Entrez le code de votre application d'authentification ou l'un de vos codes de secours à usage unique.",
     "otpAuthSubmit": "Soumettre le code",
     "idpContinue": "Ou continuer avec",
+    "idpLastUsed": "Dernière utilisation",
     "otpAuthBack": "Retour au mot de passe",
     "navbar": "Menu de navigation",
     "navbarDescription": "Menu de navigation principal de l'application",

From 89f4f4ba6f524b95d04649967419477829f12454 Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Wed, 15 Jul 2026 20:54:10 -0400
Subject: [PATCH 39/94] New translations en-us.json (Portuguese)

[ci skip]
---
 messages/pt-PT.json | 20 +++++++++++++++-----
 1 file changed, 15 insertions(+), 5 deletions(-)

diff --git a/messages/pt-PT.json b/messages/pt-PT.json
index c0d65e0fb..4a37fb52b 100644
--- a/messages/pt-PT.json
+++ b/messages/pt-PT.json
@@ -449,8 +449,14 @@
     "provisioningManage": "Provisionamento",
     "provisioningDescription": "Gerenciar chaves de provisionamento e revisar sites pendentes aguardando aprovação.",
     "pendingSites": "Sites pendentes",
-    "siteApproveSuccess": "Site aprovado com sucesso",
+    "siteApproveSuccess": "Site e recursos associados aprovados com sucesso",
     "siteApproveError": "Erro ao aprovar site",
+    "siteReject": "Rejeitar Site",
+    "siteQuestionReject": "Tem certeza de que deseja rejeitar este site?",
+    "siteMessageReject": "Isto eliminará permanentemente o site e quaisquer recursos associados que ainda estejam pendentes.",
+    "siteConfirmReject": "Confirmar Rejeição de Site",
+    "siteRejectSuccess": "Site rejeitado com sucesso",
+    "siteRejectError": "Erro ao rejeitar site",
     "provisioningKeys": "Posicionando chaves",
     "searchProvisioningKeys": "Pesquisar chaves de provisionamento...",
     "provisioningKeysAdd": "Gerar chave de provisionamento",
@@ -466,12 +472,12 @@
     "provisioningKeysSave": "Salvar a chave de provisionamento",
     "provisioningKeysSaveDescription": "Você só será capaz de ver esta vez. Copiá-lo para um lugar seguro.",
     "provisioningKeysErrorCreate": "Erro ao criar chave de provisionamento",
-    "provisioningKeysList": "Nova chave de aprovisionamento",
-    "provisioningKeysMaxBatchSize": "Tamanho máximo do lote",
+    "provisioningKeysList": "Nova Chave de Provisionamento",
+    "provisioningKeysMaxBatchSize": "Tamanho Máximo do Lote",
     "provisioningKeysUnlimitedBatchSize": "Tamanho ilimitado em lote (sem limite)",
     "provisioningKeysMaxBatchUnlimited": "Ilimitado",
     "provisioningKeysMaxBatchSizeInvalid": "Informe um tamanho máximo válido em lote (1–1,000,000).",
-    "provisioningKeysValidUntil": "Valido ate",
+    "provisioningKeysValidUntil": "Válido Até",
     "provisioningKeysValidUntilHint": "Deixe em branco para nenhuma expiração.",
     "provisioningKeysValidUntilInvalid": "Informe uma data e hora válidas.",
     "provisioningKeysNumUsed": "Use percentual",
@@ -480,7 +486,7 @@
     "provisioningKeysNeverUsed": "nunca",
     "provisioningKeysEdit": "Editar chave de provisionamento",
     "provisioningKeysEditDescription": "Atualizar o tamanho máximo do lote e tempo de expiração para esta chave.",
-    "provisioningKeysApproveNewSites": "Aprovar novos sites",
+    "provisioningKeysApproveNewSites": "Aprovar Novos Sites",
     "provisioningKeysApproveNewSitesDescription": "Aprovar automaticamente sites que se registram com esta chave.",
     "provisioningKeysUpdateError": "Erro ao atualizar chave de provisionamento",
     "provisioningKeysUpdated": "Chave de provisionamento atualizada",
@@ -1397,6 +1403,7 @@
     "createOrgUser": "Criar utilizador Org",
     "actionUpdateOrg": "Atualizar Organização",
     "actionRemoveInvitation": "Remover Convite",
+    "actionRemoveUserRole": "Remover Função de Utilizador",
     "actionUpdateUser": "Atualizar Usuário",
     "actionGetUser": "Obter Usuário",
     "actionGetOrgUser": "Obter Utilizador da Organização",
@@ -1419,6 +1426,8 @@
     "setupTokenDescription": "Digite o token de configuração do console do servidor.",
     "setupTokenRequired": "Token de configuração é necessário",
     "actionUpdateSite": "Atualizar Site",
+    "actionApproveSite": "Aprovar Site",
+    "actionRejectSite": "Rejeitar Site",
     "actionResetSiteBandwidth": "Redefinir banda da organização",
     "actionListSiteRoles": "Listar Funções Permitidas do Site",
     "actionCreateResource": "Criar Recurso",
@@ -1516,6 +1525,7 @@
     "otpAuthDescription": "Insira o código da sua aplicação de autenticação ou um dos seus códigos de backup de uso único.",
     "otpAuthSubmit": "Submeter Código",
     "idpContinue": "Ou continuar com",
+    "idpLastUsed": "Última Utilização",
     "otpAuthBack": "Voltar à Palavra-passe",
     "navbar": "Menu de Navegação",
     "navbarDescription": "Menu de navegação principal da aplicação",

From 5ee406c92ebe0266323879e865e20447193f4526 Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Wed, 15 Jul 2026 20:54:12 -0400
Subject: [PATCH 40/94] New translations en-us.json (Russian)

[ci skip]
---
 messages/ru-RU.json | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/messages/ru-RU.json b/messages/ru-RU.json
index 53bf7b015..efd5bee64 100644
--- a/messages/ru-RU.json
+++ b/messages/ru-RU.json
@@ -449,8 +449,14 @@
     "provisioningManage": "Подготовка",
     "provisioningDescription": "Управляйте предоставленными ключами и проверять непроверенные сайты, ожидающие утверждения.",
     "pendingSites": "Ожидающие сайты",
-    "siteApproveSuccess": "Сайт успешно утвержден",
+    "siteApproveSuccess": "Сайт и связанные ресурсы успешно одобрены",
     "siteApproveError": "Ошибка при утверждении сайта",
+    "siteReject": "Отклонить сайт",
+    "siteQuestionReject": "Вы уверены, что хотите отклонить этот сайт?",
+    "siteMessageReject": "Этот процесс окончательно удалит сайт и все связанные с ним ресурсы, которые еще ожидают.",
+    "siteConfirmReject": "Подтвердите отклонение сайта",
+    "siteRejectSuccess": "Сайт успешно отклонен",
+    "siteRejectError": "Ошибка при отклонении сайта",
     "provisioningKeys": "Ключи подготовки",
     "searchProvisioningKeys": "Поиск подготовительных ключей...",
     "provisioningKeysAdd": "Сгенерировать ключ подготовки",
@@ -466,8 +472,8 @@
     "provisioningKeysSave": "Сохранить ключ подготовки",
     "provisioningKeysSaveDescription": "Вы сможете увидеть это только один раз. Скопируйте его в безопасное место.",
     "provisioningKeysErrorCreate": "Ошибка при создании ключа подготовки",
-    "provisioningKeysList": "Новый подготовительный ключ",
-    "provisioningKeysMaxBatchSize": "Макс. размер партии",
+    "provisioningKeysList": "Новый ключ для подготовки",
+    "provisioningKeysMaxBatchSize": "Максимальный размер партии",
     "provisioningKeysUnlimitedBatchSize": "Неограниченный размер партии (без ограничений)",
     "provisioningKeysMaxBatchUnlimited": "Неограниченный",
     "provisioningKeysMaxBatchSizeInvalid": "Введите максимальный размер пакета (1–1,000,000).",
@@ -1397,6 +1403,7 @@
     "createOrgUser": "Создать пользователя Org",
     "actionUpdateOrg": "Обновить организацию",
     "actionRemoveInvitation": "Удалить приглашение",
+    "actionRemoveUserRole": "Удалить роль пользователя",
     "actionUpdateUser": "Обновить пользователя",
     "actionGetUser": "Получить пользователя",
     "actionGetOrgUser": "Получить пользователя организации",
@@ -1419,6 +1426,8 @@
     "setupTokenDescription": "Введите токен настройки из консоли сервера.",
     "setupTokenRequired": "Токен настройки обязателен",
     "actionUpdateSite": "Обновить сайт",
+    "actionApproveSite": "Одобрить сайт",
+    "actionRejectSite": "Отклонить сайт",
     "actionResetSiteBandwidth": "Сброс пропускной способности организации",
     "actionListSiteRoles": "Список разрешенных ролей сайта",
     "actionCreateResource": "Создать ресурс",
@@ -1516,6 +1525,7 @@
     "otpAuthDescription": "Введите код из вашего приложения-аутентификатора или один из ваших одноразовых резервных кодов.",
     "otpAuthSubmit": "Отправить код",
     "idpContinue": "Или продолжить с",
+    "idpLastUsed": "Последнее использование",
     "otpAuthBack": "Назад к паролю",
     "navbar": "Навигационное меню",
     "navbarDescription": "Главное навигационное меню приложения",

From e8ed8fc7e9c69bbb8ac1f74a24e3d2de3b7d074c Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Wed, 15 Jul 2026 20:54:13 -0400
Subject: [PATCH 41/94] New translations en-us.json (Turkish)

[ci skip]
---
 messages/tr-TR.json | 20 +++++++++++++++-----
 1 file changed, 15 insertions(+), 5 deletions(-)

diff --git a/messages/tr-TR.json b/messages/tr-TR.json
index 6ab5d026d..006180cc0 100644
--- a/messages/tr-TR.json
+++ b/messages/tr-TR.json
@@ -449,8 +449,14 @@
     "provisioningManage": "Tedarik",
     "provisioningDescription": "Tedarik anahtarlarını yönetin ve onay bekleyen siteleri gözden geçirin.",
     "pendingSites": "Bekleyen Siteler",
-    "siteApproveSuccess": "Site başarıyla onaylandı",
+    "siteApproveSuccess": "Site ve ilgili kaynaklar başarıyla onaylandı",
     "siteApproveError": "Site onaylanırken hata oluştu",
+    "siteReject": "Siteyi Reddet",
+    "siteQuestionReject": "Bu siteyi reddetmek istediğinizden emin misiniz?",
+    "siteMessageReject": "Bu işlem, siteyi ve hala beklemede olan herhangi bir ilgili kaynağı kalıcı olarak silecektir.",
+    "siteConfirmReject": "Site Reddetmeyi Onayla",
+    "siteRejectSuccess": "Site başarıyla reddedildi",
+    "siteRejectError": "Site reddedilirken hata oluştu",
     "provisioningKeys": "Tedarik Anahtarları",
     "searchProvisioningKeys": "Tedarik anahtarlarını ara...",
     "provisioningKeysAdd": "Tedarik Anahtarı Üret",
@@ -466,12 +472,12 @@
     "provisioningKeysSave": "Tedarik anahtarını kaydet",
     "provisioningKeysSaveDescription": "Bunu yalnızca bir kez görebileceksiniz. Güvenli bir yere kopyalayın.",
     "provisioningKeysErrorCreate": "Tedarik anahtarı oluşturulurken hata oluştu",
-    "provisioningKeysList": "Yeni tedarik anahtarı",
-    "provisioningKeysMaxBatchSize": "Maksimum toplu iş boyutu",
+    "provisioningKeysList": "Yeni Sağlama Anahtarı",
+    "provisioningKeysMaxBatchSize": "Maksimum Toplu İş Boyutu",
     "provisioningKeysUnlimitedBatchSize": "Sınırsız toplu iş boyutu (sınırlama yok)",
     "provisioningKeysMaxBatchUnlimited": "Sınırsız",
     "provisioningKeysMaxBatchSizeInvalid": "Geçerli bir maksimum toplu iş boyutu girin (1–1,000,000).",
-    "provisioningKeysValidUntil": "Geçerlilik tarihi",
+    "provisioningKeysValidUntil": "Geçerli Olma Süresi",
     "provisioningKeysValidUntilHint": "Son kullanım tarihi için boş bırakın.",
     "provisioningKeysValidUntilInvalid": "Geçerli bir tarih ve saat girin.",
     "provisioningKeysNumUsed": "Kullanım Sayısı",
@@ -480,7 +486,7 @@
     "provisioningKeysNeverUsed": "Asla",
     "provisioningKeysEdit": "Tedarik Anahtarını Düzenle",
     "provisioningKeysEditDescription": "Bu anahtar için maksimum toplu iş boyutunu ve son kullanma zamanını güncelleyin.",
-    "provisioningKeysApproveNewSites": "Yeni siteleri onayla",
+    "provisioningKeysApproveNewSites": "Yeni Siteleri Onayla",
     "provisioningKeysApproveNewSitesDescription": "Bu anahtar ile kayıt olan siteleri otomatik olarak onayla.",
     "provisioningKeysUpdateError": "Tedarik anahtarı güncellenirken hata oluştu",
     "provisioningKeysUpdated": "Tedarik anahtarı güncellendi",
@@ -1397,6 +1403,7 @@
     "createOrgUser": "Organizasyon Kullanıcısı Oluştur",
     "actionUpdateOrg": "Kuruluşu Güncelle",
     "actionRemoveInvitation": "Daveti Kaldır",
+    "actionRemoveUserRole": "Kullanıcı Rolünü Kaldır",
     "actionUpdateUser": "Kullanıcıyı Güncelle",
     "actionGetUser": "Kullanıcıyı Getir",
     "actionGetOrgUser": "Kuruluş Kullanıcısını Al",
@@ -1419,6 +1426,8 @@
     "setupTokenDescription": "Sunucu konsolundan kurulum simgesini girin.",
     "setupTokenRequired": "Kurulum simgesi gerekli",
     "actionUpdateSite": "Siteyi Güncelle",
+    "actionApproveSite": "Siteyi Onayla",
+    "actionRejectSite": "Siteyi Reddet",
     "actionResetSiteBandwidth": "Organizasyon Bant Genişliğini Sıfırla",
     "actionListSiteRoles": "İzin Verilen Site Rolleri Listele",
     "actionCreateResource": "Kaynak Oluştur",
@@ -1516,6 +1525,7 @@
     "otpAuthDescription": "Authenticator uygulamanızdan veya tek kullanımlık yedek kodlarınızdan birini girin.",
     "otpAuthSubmit": "Kodu Gönder",
     "idpContinue": "Veya devam et:",
+    "idpLastUsed": "Son Kullanılan",
     "otpAuthBack": "Şifreye Geri Dön",
     "navbar": "Navigasyon Menüsü",
     "navbarDescription": "Uygulamanın ana navigasyon menüsü",

From d7d31b78f033e030b5a060cbc02877864bebd2fa Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Wed, 15 Jul 2026 20:54:15 -0400
Subject: [PATCH 42/94] New translations en-us.json (Chinese Simplified)

[ci skip]
---
 messages/zh-CN.json | 18 ++++++++++++++----
 1 file changed, 14 insertions(+), 4 deletions(-)

diff --git a/messages/zh-CN.json b/messages/zh-CN.json
index 3d34fef2e..e5a680d99 100644
--- a/messages/zh-CN.json
+++ b/messages/zh-CN.json
@@ -449,8 +449,14 @@
     "provisioningManage": "预配",
     "provisioningDescription": "管理预配密钥，并审核待批准的站点。",
     "pendingSites": "待审批站点",
-    "siteApproveSuccess": "站点批准成功",
+    "siteApproveSuccess": "站点及相关资源已成功审批",
     "siteApproveError": "批准站点出错",
+    "siteReject": "拒绝站点",
+    "siteQuestionReject": "您确定要拒绝此站点吗？",
+    "siteMessageReject": "这将永久删除站点及所有尚未处理的相关资源。",
+    "siteConfirmReject": "确认拒绝站点",
+    "siteRejectSuccess": "站点已被成功拒绝",
+    "siteRejectError": "拒绝站点时出错",
     "provisioningKeys": "置备键",
     "searchProvisioningKeys": "搜索配备密钥...",
     "provisioningKeysAdd": "生成预配密钥",
@@ -466,8 +472,8 @@
     "provisioningKeysSave": "保存预配键",
     "provisioningKeysSaveDescription": "您只能看到一次。复制它到一个安全的地方。",
     "provisioningKeysErrorCreate": "创建预配键时出错",
-    "provisioningKeysList": "新建预配键",
-    "provisioningKeysMaxBatchSize": "最大批量大小",
+    "provisioningKeysList": "新预配密钥",
+    "provisioningKeysMaxBatchSize": "最大批次大小",
     "provisioningKeysUnlimitedBatchSize": "无限批量大小(无限制)",
     "provisioningKeysMaxBatchUnlimited": "无限制",
     "provisioningKeysMaxBatchSizeInvalid": "输入一个有效的最大批处理大小(1-1,000,000)。",
@@ -480,7 +486,7 @@
     "provisioningKeysNeverUsed": "永不过期",
     "provisioningKeysEdit": "编辑置备键",
     "provisioningKeysEditDescription": "更新此密钥的最大批量大小和过期时间。",
-    "provisioningKeysApproveNewSites": "批准新节点",
+    "provisioningKeysApproveNewSites": "批准新站点",
     "provisioningKeysApproveNewSitesDescription": "自动批准使用此密钥注册的节点。",
     "provisioningKeysUpdateError": "更新预配键时出错",
     "provisioningKeysUpdated": "置备密钥已更新",
@@ -1397,6 +1403,7 @@
     "createOrgUser": "创建组织用户",
     "actionUpdateOrg": "更新组织",
     "actionRemoveInvitation": "移除邀请",
+    "actionRemoveUserRole": "移除用户角色",
     "actionUpdateUser": "更新用户",
     "actionGetUser": "获取用户",
     "actionGetOrgUser": "获取组织用户",
@@ -1419,6 +1426,8 @@
     "setupTokenDescription": "从服务器控制台输入设置令牌。",
     "setupTokenRequired": "需要设置令牌",
     "actionUpdateSite": "更新站点",
+    "actionApproveSite": "批准站点",
+    "actionRejectSite": "拒绝站点",
     "actionResetSiteBandwidth": "重置组织带宽",
     "actionListSiteRoles": "允许站点角色列表",
     "actionCreateResource": "创建资源",
@@ -1516,6 +1525,7 @@
     "otpAuthDescription": "从您的身份验证程序中输入代码或您的单次备份代码。",
     "otpAuthSubmit": "提交代码",
     "idpContinue": "或者继续",
+    "idpLastUsed": "上次使用",
     "otpAuthBack": "回到密码",
     "navbar": "导航菜单",
     "navbarDescription": "应用程序的主导航菜单",

From 4d9e38d022f7b33cb009bd3a31de35ecc7e31d3a Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Wed, 15 Jul 2026 20:54:17 -0400
Subject: [PATCH 43/94] New translations en-us.json (Norwegian Bokmal)

[ci skip]
---
 messages/nb-NO.json | 20 +++++++++++++++-----
 1 file changed, 15 insertions(+), 5 deletions(-)

diff --git a/messages/nb-NO.json b/messages/nb-NO.json
index 1e0d6a1a3..9bcca74db 100644
--- a/messages/nb-NO.json
+++ b/messages/nb-NO.json
@@ -449,8 +449,14 @@
     "provisioningManage": "Levering",
     "provisioningDescription": "Administrer foreløpig nøkler og gjennomgå ventende nettsteder som venter på godkjenning.",
     "pendingSites": "Ventende nettsteder",
-    "siteApproveSuccess": "Vellykket godkjenning av nettsted",
+    "siteApproveSuccess": "Område og tilknyttede ressurser godkjent",
     "siteApproveError": "Feil ved godkjenning av side",
+    "siteReject": "Avvis Område",
+    "siteQuestionReject": "Er du sikker på at du vil avvise dette området?",
+    "siteMessageReject": "Dette vil permanent slette området og eventuelle tilknyttede ressurser som fortsatt venter.",
+    "siteConfirmReject": "Bekreft Avvisning av Område",
+    "siteRejectSuccess": "Område avvist",
+    "siteRejectError": "Feil ved avvisning av området",
     "provisioningKeys": "Foreløpig nøkler",
     "searchProvisioningKeys": "Søk varer i lagrings nøkler...",
     "provisioningKeysAdd": "Generer fremvisende nøkkel",
@@ -466,12 +472,12 @@
     "provisioningKeysSave": "Lagre den midlertidig nøkkelen",
     "provisioningKeysSaveDescription": "Du kan bare se denne én gang. Kopier det til et sikkert sted.",
     "provisioningKeysErrorCreate": "Feil under oppretting av foreløpig nøkkel",
-    "provisioningKeysList": "Ny provisorisk nøkkel",
-    "provisioningKeysMaxBatchSize": "Maks størrelse på bunt",
+    "provisioningKeysList": "Ny Forsyningsnøkkel",
+    "provisioningKeysMaxBatchSize": "Maks Batch Størrelse",
     "provisioningKeysUnlimitedBatchSize": "Ubegrenset mengde bunt (ingen begrensning)",
     "provisioningKeysMaxBatchUnlimited": "Ubegrenset",
     "provisioningKeysMaxBatchSizeInvalid": "Angi en gyldig sjakkstørrelse (1–1 000.000).",
-    "provisioningKeysValidUntil": "Gyldig til",
+    "provisioningKeysValidUntil": "Gyldig Til",
     "provisioningKeysValidUntilHint": "La stå tomt for ingen utløp.",
     "provisioningKeysValidUntilInvalid": "Angi en gyldig dato og klokkeslett.",
     "provisioningKeysNumUsed": "Antall ganger brukt",
@@ -480,7 +486,7 @@
     "provisioningKeysNeverUsed": "Aldri",
     "provisioningKeysEdit": "Rediger bestemmelsesnøkkel",
     "provisioningKeysEditDescription": "Oppdater maksimal størrelse for bunt og utløpstid for denne nøkkelen.",
-    "provisioningKeysApproveNewSites": "Godkjenn nye nettsteder",
+    "provisioningKeysApproveNewSites": "Godkjenn Nye Områder",
     "provisioningKeysApproveNewSitesDescription": "Godkjenn automatisk nettsteder som registrerer deg med denne nøkkelen.",
     "provisioningKeysUpdateError": "Feil under oppdatering av foreløpig nøkkel",
     "provisioningKeysUpdated": "Foreslå nøkkel oppdatert",
@@ -1397,6 +1403,7 @@
     "createOrgUser": "Opprett Org bruker",
     "actionUpdateOrg": "Oppdater organisasjon",
     "actionRemoveInvitation": "Fjern invitasjon",
+    "actionRemoveUserRole": "Fjern Brukerrolle",
     "actionUpdateUser": "Oppdater bruker",
     "actionGetUser": "Hent bruker",
     "actionGetOrgUser": "Hent organisasjonsbruker",
@@ -1419,6 +1426,8 @@
     "setupTokenDescription": "Skriv inn oppsetttoken fra serverkonsollen.",
     "setupTokenRequired": "Oppsetttoken er nødvendig",
     "actionUpdateSite": "Oppdater område",
+    "actionApproveSite": "Godkjenn Område",
+    "actionRejectSite": "Avvis Område",
     "actionResetSiteBandwidth": "Tilbakestill organisasjons-båndbredde",
     "actionListSiteRoles": "List opp tillatte områderoller",
     "actionCreateResource": "Opprett ressurs",
@@ -1516,6 +1525,7 @@
     "otpAuthDescription": "Skriv inn koden fra autentiseringsappen din eller en av dine engangs reservekoder.",
     "otpAuthSubmit": "Send inn kode",
     "idpContinue": "Eller fortsett med",
+    "idpLastUsed": "Sist brukt",
     "otpAuthBack": "Tilbake til passord",
     "navbar": "Navigasjonsmeny",
     "navbarDescription": "Hovednavigasjonsmeny for applikasjonen",

From 3fb36c143430e6ab905aa040866e30bf16d93eba Mon Sep 17 00:00:00 2001
From: miloschwartz <mschwartz10612@gmail.com>
Date: Wed, 15 Jul 2026 22:03:28 -0400
Subject: [PATCH 44/94] add missing translation

---
 messages/en-US.json | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/messages/en-US.json b/messages/en-US.json
index 23195eab0..6893b41fa 100644
--- a/messages/en-US.json
+++ b/messages/en-US.json
@@ -3811,5 +3811,6 @@
     "rdpUploadFailed": "Upload failed",
     "rdpUnicodeKeyboardMode": "Unicode keyboard mode",
     "sessionToolbarShow": "Show toolbar",
-    "sessionToolbarHide": "Hide toolbar"
+    "sessionToolbarHide": "Hide toolbar",
+    "actionUpdateSiteApprovals": "Update Site Approvals"
 }

From 530a1a53509fe9392f2b1a382eb04f1fbf769ae2 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Wed, 15 Jul 2026 17:30:15 -0400
Subject: [PATCH 45/94] Add new column

---
 server/db/pg/schema/schema.ts     | 1 +
 server/db/sqlite/schema/schema.ts | 1 +
 2 files changed, 2 insertions(+)

diff --git a/server/db/pg/schema/schema.ts b/server/db/pg/schema/schema.ts
index f3375b0d9..12f291604 100644
--- a/server/db/pg/schema/schema.ts
+++ b/server/db/pg/schema/schema.ts
@@ -107,6 +107,7 @@ export const sites = pgTable(
         lastPing: integer("lastPing"),
         address: varchar("address"),
         endpoint: varchar("endpoint"),
+        localEndpoints: varchar("localEndpoints"), // JSON encoded list of string ips on the local machine to try to connect to
         publicKey: varchar("publicKey"),
         lastHolePunch: bigint("lastHolePunch", { mode: "number" }),
         listenPort: integer("listenPort"),
diff --git a/server/db/sqlite/schema/schema.ts b/server/db/sqlite/schema/schema.ts
index 3fcf38a41..b8a01af89 100644
--- a/server/db/sqlite/schema/schema.ts
+++ b/server/db/sqlite/schema/schema.ts
@@ -118,6 +118,7 @@ export const sites = sqliteTable("sites", {
     // exit node stuff that is how to connect to the site when it has a wg server
     address: text("address"), // this is the address of the wireguard interface in newt
     endpoint: text("endpoint"), // this is how to reach gerbil externally - gets put into the wireguard config
+    localEndpoints: text("localEndpoints"), // JSON encoded list of string ips on the local machine to try to connect to
     publicKey: text("publicKey"), // TODO: Fix typo in publicKey
     lastHolePunch: integer("lastHolePunch"),
     listenPort: integer("listenPort"),

From 7f9c7603807ce9fd5864d6b5e037700ceacb39fa Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Wed, 15 Jul 2026 20:45:18 -0400
Subject: [PATCH 46/94] Save the local endpoints

---
 server/routers/newt/handleNewtRegisterMessage.ts | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/server/routers/newt/handleNewtRegisterMessage.ts b/server/routers/newt/handleNewtRegisterMessage.ts
index 0dc8380c8..bb77fb53f 100644
--- a/server/routers/newt/handleNewtRegisterMessage.ts
+++ b/server/routers/newt/handleNewtRegisterMessage.ts
@@ -48,7 +48,8 @@ export const handleNewtRegisterMessage: MessageHandler = async (context) => {
         pingResults,
         newtVersion,
         backwardsCompatible,
-        chainId
+        chainId,
+        localEndpoints
     } = message.data;
     if (!publicKey) {
         logger.warn("Public key not provided");
@@ -131,7 +132,8 @@ export const handleNewtRegisterMessage: MessageHandler = async (context) => {
             .set({
                 pubKey: publicKey,
                 exitNodeId: exitNodeId,
-                subnet: newSubnet
+                subnet: newSubnet,
+                localEndpoints: localEndpoints || null
             })
             .where(eq(sites.siteId, siteId))
             .returning();
@@ -139,7 +141,8 @@ export const handleNewtRegisterMessage: MessageHandler = async (context) => {
         await db
             .update(sites)
             .set({
-                pubKey: publicKey
+                pubKey: publicKey,
+                localEndpoints: localEndpoints || null
             })
             .where(eq(sites.siteId, siteId))
             .returning();

From 903e8c0fa10f7488cb32a6e2edcdae244a881f17 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Thu, 16 Jul 2026 10:47:24 -0400
Subject: [PATCH 47/94] Send localEndpoints on sites to olm

---
 .../routers/newt/handleNewtRegisterMessage.ts |  8 +++--
 server/routers/olm/buildConfiguration.ts      |  4 +++
 .../olm/handleOlmServerPeerAddMessage.ts      | 32 ++++++-------------
 server/routers/olm/peers.ts                   |  2 ++
 4 files changed, 22 insertions(+), 24 deletions(-)

diff --git a/server/routers/newt/handleNewtRegisterMessage.ts b/server/routers/newt/handleNewtRegisterMessage.ts
index bb77fb53f..17a8d955a 100644
--- a/server/routers/newt/handleNewtRegisterMessage.ts
+++ b/server/routers/newt/handleNewtRegisterMessage.ts
@@ -133,7 +133,9 @@ export const handleNewtRegisterMessage: MessageHandler = async (context) => {
                 pubKey: publicKey,
                 exitNodeId: exitNodeId,
                 subnet: newSubnet,
-                localEndpoints: localEndpoints || null
+                localEndpoints: localEndpoints
+                    ? JSON.stringify(localEndpoints)
+                    : null
             })
             .where(eq(sites.siteId, siteId))
             .returning();
@@ -142,7 +144,9 @@ export const handleNewtRegisterMessage: MessageHandler = async (context) => {
             .update(sites)
             .set({
                 pubKey: publicKey,
-                localEndpoints: localEndpoints || null
+                localEndpoints: localEndpoints
+                    ? JSON.stringify(localEndpoints)
+                    : null
             })
             .where(eq(sites.siteId, siteId))
             .returning();
diff --git a/server/routers/olm/buildConfiguration.ts b/server/routers/olm/buildConfiguration.ts
index 0266fa041..37355eae5 100644
--- a/server/routers/olm/buildConfiguration.ts
+++ b/server/routers/olm/buildConfiguration.ts
@@ -30,6 +30,7 @@ export async function buildSiteConfigurationForOlmClient(
         siteId: number;
         name?: string;
         endpoint?: string;
+        localEndpoints?: string[];
         publicKey?: string;
         serverIP?: string | null;
         serverPort?: number | null;
@@ -206,6 +207,9 @@ export async function buildSiteConfigurationForOlmClient(
             name: site.name,
             // relayEndpoint: relayEndpoint, // this can be undefined now if not relayed // lets not do this for now because it would conflict with the hole punch testing
             endpoint: site.endpoint,
+            localEndpoints: site.localEndpoints
+                ? JSON.parse(site.localEndpoints)
+                : undefined,
             publicKey: site.publicKey,
             serverIP: site.address,
             serverPort: site.listenPort,
diff --git a/server/routers/olm/handleOlmServerPeerAddMessage.ts b/server/routers/olm/handleOlmServerPeerAddMessage.ts
index 5f46ea84c..332afe082 100644
--- a/server/routers/olm/handleOlmServerPeerAddMessage.ts
+++ b/server/routers/olm/handleOlmServerPeerAddMessage.ts
@@ -3,24 +3,15 @@ import {
     db,
     networks,
     siteNetworks,
-    siteResources,
+    siteResources
 } from "@server/db";
 import { MessageHandler } from "@server/routers/ws";
-import {
-    clients,
-    clientSitesAssociationsCache,
-    Olm,
-    sites
-} from "@server/db";
+import { clients, clientSitesAssociationsCache, Olm, sites } from "@server/db";
 import { and, eq, inArray, isNotNull, isNull } from "drizzle-orm";
 import logger from "@server/logger";
-import {
-    generateAliasConfig,
-} from "@server/lib/ip";
+import { generateAliasConfig } from "@server/lib/ip";
 import { generateRemoteSubnets } from "@server/lib/ip";
-import {
-    addPeer as newtAddPeer,
-} from "@server/routers/newt/peers";
+import { addPeer as newtAddPeer } from "@server/routers/newt/peers";
 
 export const handleOlmServerPeerAddMessage: MessageHandler = async (
     context
@@ -135,10 +126,7 @@ export const handleOlmServerPeerAddMessage: MessageHandler = async (
                 clientSiteResourcesAssociationsCache.siteResourceId
             )
         )
-        .innerJoin(
-            networks,
-            eq(siteResources.networkId, networks.networkId)
-        )
+        .innerJoin(networks, eq(siteResources.networkId, networks.networkId))
         .innerJoin(
             siteNetworks,
             and(
@@ -147,10 +135,7 @@ export const handleOlmServerPeerAddMessage: MessageHandler = async (
             )
         )
         .where(
-            eq(
-                clientSiteResourcesAssociationsCache.clientId,
-                client.clientId
-            )
+            eq(clientSiteResourcesAssociationsCache.clientId, client.clientId)
         );
 
     // Return connect message with all site configurations
@@ -161,6 +146,9 @@ export const handleOlmServerPeerAddMessage: MessageHandler = async (
                 siteId: site.siteId,
                 name: site.name,
                 endpoint: site.endpoint,
+                localEndpoints: site.localEndpoints
+                    ? JSON.parse(site.localEndpoints)
+                    : undefined,
                 publicKey: site.publicKey,
                 serverIP: site.address,
                 serverPort: site.listenPort,
@@ -170,7 +158,7 @@ export const handleOlmServerPeerAddMessage: MessageHandler = async (
                 aliases: generateAliasConfig(
                     allSiteResources.map(({ siteResources }) => siteResources)
                 ),
-                chainId: chainId,
+                chainId: chainId
             }
         },
         broadcast: false,
diff --git a/server/routers/olm/peers.ts b/server/routers/olm/peers.ts
index 962d7367e..960c6ad23 100644
--- a/server/routers/olm/peers.ts
+++ b/server/routers/olm/peers.ts
@@ -18,6 +18,7 @@ export async function addPeer(
         serverPort: number | null;
         remoteSubnets: string[] | null; // optional, comma-separated list of subnets that this site can access
         aliases: Alias[];
+        localEndpoints?: string[]; // optional, list of local endpoints for the peer
     },
     olmId?: string,
     version?: string | null
@@ -44,6 +45,7 @@ export async function addPeer(
                 name: peer.name,
                 publicKey: peer.publicKey,
                 endpoint: peer.endpoint,
+                localEndpoints: peer.localEndpoints,
                 relayEndpoint: peer.relayEndpoint,
                 serverIP: peer.serverIP,
                 serverPort: peer.serverPort,

From 515afc14a5695fa21a70ff8ff1364c90adacecd0 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Thu, 16 Jul 2026 11:23:17 -0400
Subject: [PATCH 48/94] Add handlers

---
 server/routers/olm/handleOlmLocalMessage.ts   | 74 +++++++++++++++
 server/routers/olm/handleOlmRelayMessage.ts   |  4 +-
 server/routers/olm/handleOlmUnLocalMessage.ts | 95 +++++++++++++++++++
 server/routers/olm/handleOlmUnRelayMessage.ts |  4 +-
 server/routers/olm/index.ts                   |  2 +
 server/routers/ws/messageHandlers.ts          |  6 +-
 6 files changed, 180 insertions(+), 5 deletions(-)
 create mode 100644 server/routers/olm/handleOlmLocalMessage.ts
 create mode 100644 server/routers/olm/handleOlmUnLocalMessage.ts

diff --git a/server/routers/olm/handleOlmLocalMessage.ts b/server/routers/olm/handleOlmLocalMessage.ts
new file mode 100644
index 000000000..83ef8cbf1
--- /dev/null
+++ b/server/routers/olm/handleOlmLocalMessage.ts
@@ -0,0 +1,74 @@
+import { db, sites } from "@server/db";
+import { MessageHandler } from "@server/routers/ws";
+import { clients, Olm } from "@server/db";
+import { and, eq } from "drizzle-orm";
+import { updatePeer as newtUpdatePeer } from "../newt/peers";
+import logger from "@server/logger";
+
+export const handleOlmLocalMessage: MessageHandler = async (context) => {
+    const { message, client: c, sendToClient } = context;
+    const olm = c as Olm;
+
+    logger.info("Handling local olm message!");
+
+    if (!olm) {
+        logger.warn("Olm not found");
+        return;
+    }
+
+    if (!olm.clientId) {
+        logger.warn("Olm has no client!");
+        return;
+    }
+
+    const clientId = olm.clientId;
+
+    const [client] = await db
+        .select()
+        .from(clients)
+        .where(eq(clients.clientId, clientId))
+        .limit(1);
+
+    if (!client) {
+        logger.warn("Client not found");
+        return;
+    }
+
+    // make sure we hand endpoints for both the site and the client and the lastHolePunch is not too old
+    if (!client.pubKey) {
+        logger.warn("Client has no endpoint or listen port");
+        return;
+    }
+
+    const { siteId, chainId } = message.data;
+
+    // Get the site
+    const [site] = await db
+        .select()
+        .from(sites)
+        .where(eq(sites.siteId, siteId))
+        .limit(1);
+
+    if (!site || !site.exitNodeId) {
+        logger.warn("Site not found or has no exit node");
+        return;
+    }
+
+    // update the peer on the newt
+    await newtUpdatePeer(siteId, client.pubKey, {
+        endpoint: "" // this removes the endpoint so the newt knows to accept local
+    });
+
+    // Just ack the message, we don't keep sending it
+    return {
+        message: {
+            type: "olm/wg/peer/local",
+            data: {
+                siteId: siteId,
+                chainId
+            }
+        },
+        broadcast: false,
+        excludeSender: false
+    };
+};
diff --git a/server/routers/olm/handleOlmRelayMessage.ts b/server/routers/olm/handleOlmRelayMessage.ts
index 7196824d2..406ed7bbb 100644
--- a/server/routers/olm/handleOlmRelayMessage.ts
+++ b/server/routers/olm/handleOlmRelayMessage.ts
@@ -79,9 +79,9 @@ export const handleOlmRelayMessage: MessageHandler = async (context) => {
             )
         );
 
-    // update the peer on the exit node
+    // update the peer on the newt
     await newtUpdatePeer(siteId, client.pubKey, {
-        endpoint: "" // this removes the endpoint so the exit node knows to relay
+        endpoint: "" // this removes the endpoint so the newt knows to relay
     });
 
     return {
diff --git a/server/routers/olm/handleOlmUnLocalMessage.ts b/server/routers/olm/handleOlmUnLocalMessage.ts
new file mode 100644
index 000000000..55d312815
--- /dev/null
+++ b/server/routers/olm/handleOlmUnLocalMessage.ts
@@ -0,0 +1,95 @@
+import { db, exitNodes, sites } from "@server/db";
+import { MessageHandler } from "@server/routers/ws";
+import { clients, clientSitesAssociationsCache, Olm } from "@server/db";
+import { and, eq } from "drizzle-orm";
+import { updatePeer as newtUpdatePeer } from "../newt/peers";
+import logger from "@server/logger";
+
+export const handleOlmUnLocalMessage: MessageHandler = async (context) => {
+    const { message, client: c, sendToClient } = context;
+    const olm = c as Olm;
+
+    logger.info("Handling unlocal olm message!");
+
+    if (!olm) {
+        logger.warn("Olm not found");
+        return;
+    }
+
+    if (!olm.clientId) {
+        logger.warn("Olm has no client!");
+        return;
+    }
+
+    const clientId = olm.clientId;
+
+    const [client] = await db
+        .select()
+        .from(clients)
+        .where(eq(clients.clientId, clientId))
+        .limit(1);
+
+    if (!client) {
+        logger.warn("Client not found");
+        return;
+    }
+
+    // make sure we hand endpoints for both the site and the client and the lastHolePunch is not too old
+    if (!client.pubKey) {
+        logger.warn("Client has no endpoint or listen port");
+        return;
+    }
+
+    const { siteId, chainId } = message.data;
+
+    // Get the site
+    const [site] = await db
+        .select()
+        .from(sites)
+        .where(eq(sites.siteId, siteId))
+        .limit(1);
+
+    if (!site) {
+        logger.warn("Site not found or has no exit node");
+        return;
+    }
+
+    const [clientSiteAssociation] = await db
+        .select()
+        .from(clientSitesAssociationsCache)
+        .where(
+            and(
+                eq(clientSitesAssociationsCache.clientId, olm.clientId),
+                eq(clientSitesAssociationsCache.siteId, siteId)
+            )
+        );
+
+    if (!clientSiteAssociation) {
+        logger.warn("Client-Site association not found");
+        return;
+    }
+
+    if (!clientSiteAssociation.endpoint) {
+        logger.warn("Client-Site association has no endpoint, cannot unrelay");
+        return;
+    }
+
+    // update the peer on the newt
+    await newtUpdatePeer(siteId, client.pubKey, {
+        endpoint: clientSiteAssociation.isRelayed
+            ? ""
+            : clientSiteAssociation.endpoint // this is the endpoint of the client to connect directly to the newt
+    });
+
+    return {
+        message: {
+            type: "olm/wg/peer/unlocal",
+            data: {
+                siteId: siteId,
+                chainId
+            }
+        },
+        broadcast: false,
+        excludeSender: false
+    };
+};
diff --git a/server/routers/olm/handleOlmUnRelayMessage.ts b/server/routers/olm/handleOlmUnRelayMessage.ts
index a7b426023..3f73a5834 100644
--- a/server/routers/olm/handleOlmUnRelayMessage.ts
+++ b/server/routers/olm/handleOlmUnRelayMessage.ts
@@ -77,9 +77,9 @@ export const handleOlmUnRelayMessage: MessageHandler = async (context) => {
         return;
     }
 
-    // update the peer on the exit node
+    // update the peer on the newt
     await newtUpdatePeer(siteId, client.pubKey, {
-        endpoint: clientSiteAssociation.endpoint // this is the endpoint of the client to connect directly to the exit node
+        endpoint: clientSiteAssociation.endpoint // this is the endpoint of the client to connect directly to the newt
     });
 
     return {
diff --git a/server/routers/olm/index.ts b/server/routers/olm/index.ts
index 5c151a8cf..e11d4e48e 100644
--- a/server/routers/olm/index.ts
+++ b/server/routers/olm/index.ts
@@ -13,3 +13,5 @@ export * from "./recoverOlmWithFingerprint";
 export * from "./handleOlmDisconnectingMessage";
 export * from "./handleOlmServerInitAddPeerHandshake";
 export * from "./offlineChecker";
+export * from "./handleOlmUnLocalMessage";
+export * from "./handleOlmLocalMessage";
diff --git a/server/routers/ws/messageHandlers.ts b/server/routers/ws/messageHandlers.ts
index f89284389..496002142 100644
--- a/server/routers/ws/messageHandlers.ts
+++ b/server/routers/ws/messageHandlers.ts
@@ -20,7 +20,9 @@ import {
     handleOlmServerPeerAddMessage,
     handleOlmUnRelayMessage,
     handleOlmDisconnectingMessage,
-    handleOlmServerInitAddPeerHandshake
+    handleOlmServerInitAddPeerHandshake,
+    handleOlmLocalMessage,
+    handleOlmUnLocalMessage
 } from "../olm";
 import { handleHealthcheckStatusMessage } from "../target";
 import { handleRoundTripMessage } from "./handleRoundTripMessage";
@@ -32,6 +34,8 @@ export const messageHandlers: Record<string, MessageHandler> = {
     "olm/wg/register": handleOlmRegisterMessage,
     "olm/wg/relay": handleOlmRelayMessage,
     "olm/wg/unrelay": handleOlmUnRelayMessage,
+    "olm/wg/local": handleOlmLocalMessage,
+    "olm/wg/unlocal": handleOlmUnLocalMessage,
     "olm/ping": handleOlmPingMessage,
     "olm/disconnecting": handleOlmDisconnectingMessage,
     "newt/disconnecting": handleNewtDisconnectingMessage,

From dbfb8e83e8547bba1374ca385af8f3c8f1be766d Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Thu, 16 Jul 2026 14:43:45 -0400
Subject: [PATCH 49/94] Local endpoints from the get config

---
 server/routers/newt/handleNewtGetConfigMessage.ts |  7 +++++--
 server/routers/newt/handleNewtRegisterMessage.ts  | 13 +++----------
 2 files changed, 8 insertions(+), 12 deletions(-)

diff --git a/server/routers/newt/handleNewtGetConfigMessage.ts b/server/routers/newt/handleNewtGetConfigMessage.ts
index fd5e2b42e..d99dd89ef 100644
--- a/server/routers/newt/handleNewtGetConfigMessage.ts
+++ b/server/routers/newt/handleNewtGetConfigMessage.ts
@@ -29,7 +29,7 @@ export const handleNewtGetConfigMessage: MessageHandler = async (context) => {
         return;
     }
 
-    const { publicKey, port, chainId } = message.data;
+    const { publicKey, port, localEndpoints, chainId } = message.data;
     const siteId = newt.siteId;
 
     // Get the current site data
@@ -69,7 +69,10 @@ export const handleNewtGetConfigMessage: MessageHandler = async (context) => {
         .update(sites)
         .set({
             publicKey,
-            listenPort: port
+            listenPort: port,
+            localEndpoints: localEndpoints
+                ? JSON.stringify(localEndpoints)
+                : null
         })
         .where(eq(sites.siteId, siteId))
         .returning();
diff --git a/server/routers/newt/handleNewtRegisterMessage.ts b/server/routers/newt/handleNewtRegisterMessage.ts
index 17a8d955a..0dc8380c8 100644
--- a/server/routers/newt/handleNewtRegisterMessage.ts
+++ b/server/routers/newt/handleNewtRegisterMessage.ts
@@ -48,8 +48,7 @@ export const handleNewtRegisterMessage: MessageHandler = async (context) => {
         pingResults,
         newtVersion,
         backwardsCompatible,
-        chainId,
-        localEndpoints
+        chainId
     } = message.data;
     if (!publicKey) {
         logger.warn("Public key not provided");
@@ -132,10 +131,7 @@ export const handleNewtRegisterMessage: MessageHandler = async (context) => {
             .set({
                 pubKey: publicKey,
                 exitNodeId: exitNodeId,
-                subnet: newSubnet,
-                localEndpoints: localEndpoints
-                    ? JSON.stringify(localEndpoints)
-                    : null
+                subnet: newSubnet
             })
             .where(eq(sites.siteId, siteId))
             .returning();
@@ -143,10 +139,7 @@ export const handleNewtRegisterMessage: MessageHandler = async (context) => {
         await db
             .update(sites)
             .set({
-                pubKey: publicKey,
-                localEndpoints: localEndpoints
-                    ? JSON.stringify(localEndpoints)
-                    : null
+                pubKey: publicKey
             })
             .where(eq(sites.siteId, siteId))
             .returning();

From 55f3807491f5f84a6656d800fd1d4c811d40f878 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Thu, 16 Jul 2026 15:10:38 -0400
Subject: [PATCH 50/94] Enforce uniqueness of aliases in blueprints

---
 server/lib/blueprints/privateResources.ts | 46 +++++++++++++++++++++++
 1 file changed, 46 insertions(+)

diff --git a/server/lib/blueprints/privateResources.ts b/server/lib/blueprints/privateResources.ts
index 44901e8c8..f3fa7bf5d 100644
--- a/server/lib/blueprints/privateResources.ts
+++ b/server/lib/blueprints/privateResources.ts
@@ -239,6 +239,31 @@ export async function updatePrivateResources(
                 );
             }
 
+            if (resourceData.alias) {
+                const [aliasConflict] = await trx
+                    .select({
+                        siteResourceId: siteResources.siteResourceId
+                    })
+                    .from(siteResources)
+                    .where(
+                        and(
+                            eq(siteResources.orgId, orgId),
+                            eq(siteResources.alias, resourceData.alias),
+                            ne(
+                                siteResources.siteResourceId,
+                                existingResource.siteResourceId
+                            )
+                        )
+                    )
+                    .limit(1);
+
+                if (aliasConflict) {
+                    throw new Error(
+                        `Alias ${resourceData.alias} already in use by another site resource in org ${orgId}`
+                    );
+                }
+            }
+
             // Update existing resource
             const [updatedResource] = await trx
                 .update(siteResources)
@@ -480,6 +505,27 @@ export async function updatePrivateResources(
                 );
             }
 
+            if (resourceData.alias) {
+                const [aliasConflict] = await trx
+                    .select({
+                        siteResourceId: siteResources.siteResourceId
+                    })
+                    .from(siteResources)
+                    .where(
+                        and(
+                            eq(siteResources.orgId, orgId),
+                            eq(siteResources.alias, resourceData.alias)
+                        )
+                    )
+                    .limit(1);
+
+                if (aliasConflict) {
+                    throw new Error(
+                        `Alias ${resourceData.alias} already in use by another site resource in org ${orgId}`
+                    );
+                }
+            }
+
             const [network] = await trx
                 .insert(networks)
                 .values({

From a88b79e066c9271675ece2d390cb678c243a9bf6 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Thu, 16 Jul 2026 16:09:35 -0400
Subject: [PATCH 51/94] Add timezone offset to fix bad display

---
 server/lib/statusHistory.ts                   | 67 ++++++++++++++-----
 .../routers/healthChecks/getStatusHistory.ts  |  9 ++-
 server/routers/resource/getStatusHistory.ts   |  9 ++-
 server/routers/site/getStatusHistory.ts       |  9 ++-
 src/lib/queries.ts                            | 17 +++--
 5 files changed, 82 insertions(+), 29 deletions(-)

diff --git a/server/lib/statusHistory.ts b/server/lib/statusHistory.ts
index 7c5b5c370..d11ea88ef 100644
--- a/server/lib/statusHistory.ts
+++ b/server/lib/statusHistory.ts
@@ -8,26 +8,42 @@ const STATUS_HISTORY_CACHE_TTL = 60; // seconds
 function statusHistoryCacheKey(
     entityType: string,
     entityId: number,
-    days: number
+    days: number,
+    tzOffsetMinutes: number
 ): string {
-    return `statusHistory:${entityType}:${entityId}:${days}`;
+    return `statusHistory:${entityType}:${entityId}:${days}:${tzOffsetMinutes}`;
+}
+
+// Returns the epoch seconds of the most recent local-calendar-day midnight,
+// where "local" is defined by tzOffsetMinutes (minutes to ADD to UTC to get
+// local time, e.g. Australia/Sydney standard time is 600). Defaults to 0
+// (UTC) so callers that don't pass a timezone keep the original behavior.
+function localMidnightSec(tzOffsetMinutes: number): number {
+    const localNow = new Date(Date.now() + tzOffsetMinutes * 60_000);
+    localNow.setUTCHours(0, 0, 0, 0);
+    return Math.floor(localNow.getTime() / 1000) - tzOffsetMinutes * 60;
 }
 
 export async function getCachedStatusHistory(
     entityType: string,
     entityId: number,
-    days: number
+    days: number,
+    tzOffsetMinutes: number = 0
 ): Promise<StatusHistoryResponse> {
-    const cacheKey = statusHistoryCacheKey(entityType, entityId, days);
+    const cacheKey = statusHistoryCacheKey(
+        entityType,
+        entityId,
+        days,
+        tzOffsetMinutes
+    );
     const cached = await cache.get<StatusHistoryResponse>(cacheKey);
     if (cached !== undefined) {
         return cached;
     }
 
-    // Anchor to UTC midnight so the query window aligns with stable calendar days
-    const utcToday = new Date();
-    utcToday.setUTCHours(0, 0, 0, 0);
-    const todayMidnightSec = Math.floor(utcToday.getTime() / 1000);
+    // Anchor to local midnight (UTC when tzOffsetMinutes is 0) so the query
+    // window aligns with stable calendar days for the requesting client
+    const todayMidnightSec = localMidnightSec(tzOffsetMinutes);
     const startSec = todayMidnightSec - days * 86400;
 
     const events = await logsDb
@@ -63,7 +79,8 @@ export async function getCachedStatusHistory(
     const { buckets, totalDowntime } = computeBuckets(
         events,
         days,
-        priorStatus
+        priorStatus,
+        tzOffsetMinutes
     );
     const totalWindow = days * 86400;
     const overallUptime =
@@ -99,11 +116,19 @@ export const statusHistoryQuerySchema = z
         days: z
             .string()
             .optional()
-            .transform((v) => (v ? parseInt(v, 10) : 90))
+            .transform((v) => (v ? parseInt(v, 10) : 90)),
+        // Minutes to add to UTC to get the requesting client's local time
+        // (e.g. Australia/Sydney standard time is 600). Optional and
+        // defaults to 0 (UTC) so older clients keep the prior behavior.
+        tzOffsetMinutes: z
+            .string()
+            .optional()
+            .transform((v) => (v ? parseInt(v, 10) : 0))
     })
     .pipe(
         z.object({
-            days: z.number().int().min(1).max(365)
+            days: z.number().int().min(1).max(365),
+            tzOffsetMinutes: z.number().int().min(-720).max(840)
         })
     );
 
@@ -133,15 +158,15 @@ export function computeBuckets(
         id: number;
     }[],
     days: number,
-    priorStatus: string | null = null
+    priorStatus: string | null = null,
+    tzOffsetMinutes: number = 0
 ): { buckets: StatusHistoryDayBucket[]; totalDowntime: number } {
     const nowSec = Math.floor(Date.now() / 1000);
 
-    // Anchor bucket boundaries to UTC midnight so dates are stable calendar days
-    // and don't drift as the cache expires and is recomputed
-    const utcToday = new Date();
-    utcToday.setUTCHours(0, 0, 0, 0);
-    const todayMidnightSec = Math.floor(utcToday.getTime() / 1000);
+    // Anchor bucket boundaries to local midnight (UTC when tzOffsetMinutes is
+    // 0) so dates are stable calendar days for the requesting client and
+    // don't drift as the cache expires and is recomputed
+    const todayMidnightSec = localMidnightSec(tzOffsetMinutes);
 
     const buckets: StatusHistoryDayBucket[] = [];
     let totalDowntime = 0;
@@ -237,7 +262,13 @@ export function computeBuckets(
                   )
                 : 100;
 
-        const dateStr = new Date(dayStartSec * 1000).toISOString().slice(0, 10);
+        // Shift by the client's offset before formatting so the label reflects
+        // their local calendar date rather than the UTC date of dayStartSec
+        const dateStr = new Date(
+            (dayStartSec + tzOffsetMinutes * 60) * 1000
+        )
+            .toISOString()
+            .slice(0, 10);
 
         const hasAnyData = currentStatus !== null || dayEvents.length > 0;
 
diff --git a/server/private/routers/healthChecks/getStatusHistory.ts b/server/private/routers/healthChecks/getStatusHistory.ts
index 51a59e2e1..484870886 100644
--- a/server/private/routers/healthChecks/getStatusHistory.ts
+++ b/server/private/routers/healthChecks/getStatusHistory.ts
@@ -55,9 +55,14 @@ export async function getHealthCheckStatusHistory(
 
         const entityType = "health_check";
         const entityId = parsedParams.data.healthCheckId;
-        const { days } = parsedQuery.data;
+        const { days, tzOffsetMinutes } = parsedQuery.data;
 
-        const data = await getCachedStatusHistory(entityType, entityId, days);
+        const data = await getCachedStatusHistory(
+            entityType,
+            entityId,
+            days,
+            tzOffsetMinutes
+        );
 
         return response<StatusHistoryResponse>(res, {
             data,
diff --git a/server/routers/resource/getStatusHistory.ts b/server/routers/resource/getStatusHistory.ts
index c3dcf6c88..19e11b78f 100644
--- a/server/routers/resource/getStatusHistory.ts
+++ b/server/routers/resource/getStatusHistory.ts
@@ -42,9 +42,14 @@ export async function getResourceStatusHistory(
 
         const entityType = "resource";
         const entityId = parsedParams.data.resourceId;
-        const { days } = parsedQuery.data;
+        const { days, tzOffsetMinutes } = parsedQuery.data;
 
-        const data = await getCachedStatusHistory(entityType, entityId, days);
+        const data = await getCachedStatusHistory(
+            entityType,
+            entityId,
+            days,
+            tzOffsetMinutes
+        );
 
         return response<StatusHistoryResponse>(res, {
             data,
diff --git a/server/routers/site/getStatusHistory.ts b/server/routers/site/getStatusHistory.ts
index 26f1dbbd2..d281961e9 100644
--- a/server/routers/site/getStatusHistory.ts
+++ b/server/routers/site/getStatusHistory.ts
@@ -42,9 +42,14 @@ export async function getSiteStatusHistory(
 
         const entityType = "site";
         const entityId = parsedParams.data.siteId;
-        const { days } = parsedQuery.data;
+        const { days, tzOffsetMinutes } = parsedQuery.data;
 
-        const data = await getCachedStatusHistory(entityType, entityId, days);
+        const data = await getCachedStatusHistory(
+            entityType,
+            entityId,
+            days,
+            tzOffsetMinutes
+        );
 
         return response<StatusHistoryResponse>(res, {
             data,
diff --git a/src/lib/queries.ts b/src/lib/queries.ts
index 8fdb1c531..3194e5651 100644
--- a/src/lib/queries.ts
+++ b/src/lib/queries.ts
@@ -650,9 +650,13 @@ export const orgQueries = {
         queryOptions({
             queryKey: ["SITE_STATUS_HISTORY", siteId, days] as const,
             queryFn: async ({ signal, meta }) => {
+                const tzOffsetMinutes = -new Date().getTimezoneOffset();
                 const res = await meta!.api.get<
                     AxiosResponse<StatusHistoryResponse>
-                >(`/site/${siteId}/status-history?days=${days}`, { signal });
+                >(
+                    `/site/${siteId}/status-history?days=${days}&tzOffsetMinutes=${tzOffsetMinutes}`,
+                    { signal }
+                );
                 return res.data.data;
             }
         }),
@@ -667,11 +671,13 @@ export const orgQueries = {
         queryOptions({
             queryKey: ["RESOURCE_STATUS_HISTORY", resourceId, days] as const,
             queryFn: async ({ signal, meta }) => {
+                const tzOffsetMinutes = -new Date().getTimezoneOffset();
                 const res = await meta!.api.get<
                     AxiosResponse<StatusHistoryResponse>
-                >(`/resource/${resourceId}/status-history?days=${days}`, {
-                    signal
-                });
+                >(
+                    `/resource/${resourceId}/status-history?days=${days}&tzOffsetMinutes=${tzOffsetMinutes}`,
+                    { signal }
+                );
                 return res.data.data;
             }
         }),
@@ -693,10 +699,11 @@ export const orgQueries = {
                 days
             ] as const,
             queryFn: async ({ signal, meta }) => {
+                const tzOffsetMinutes = -new Date().getTimezoneOffset();
                 const res = await meta!.api.get<
                     AxiosResponse<StatusHistoryResponse>
                 >(
-                    `/org/${orgId}/health-check/${healthCheckId}/status-history?days=${days}`,
+                    `/org/${orgId}/health-check/${healthCheckId}/status-history?days=${days}&tzOffsetMinutes=${tzOffsetMinutes}`,
                     { signal }
                 );
                 return res.data.data;

From 08c5ec2be78673a5b3d231383c513028f03f5f61 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Wed, 15 Jul 2026 17:30:15 -0400
Subject: [PATCH 52/94] Add new column

---
 server/db/pg/schema/schema.ts     | 1 +
 server/db/sqlite/schema/schema.ts | 1 +
 2 files changed, 2 insertions(+)

diff --git a/server/db/pg/schema/schema.ts b/server/db/pg/schema/schema.ts
index f3375b0d9..12f291604 100644
--- a/server/db/pg/schema/schema.ts
+++ b/server/db/pg/schema/schema.ts
@@ -107,6 +107,7 @@ export const sites = pgTable(
         lastPing: integer("lastPing"),
         address: varchar("address"),
         endpoint: varchar("endpoint"),
+        localEndpoints: varchar("localEndpoints"), // JSON encoded list of string ips on the local machine to try to connect to
         publicKey: varchar("publicKey"),
         lastHolePunch: bigint("lastHolePunch", { mode: "number" }),
         listenPort: integer("listenPort"),
diff --git a/server/db/sqlite/schema/schema.ts b/server/db/sqlite/schema/schema.ts
index 3fcf38a41..b8a01af89 100644
--- a/server/db/sqlite/schema/schema.ts
+++ b/server/db/sqlite/schema/schema.ts
@@ -118,6 +118,7 @@ export const sites = sqliteTable("sites", {
     // exit node stuff that is how to connect to the site when it has a wg server
     address: text("address"), // this is the address of the wireguard interface in newt
     endpoint: text("endpoint"), // this is how to reach gerbil externally - gets put into the wireguard config
+    localEndpoints: text("localEndpoints"), // JSON encoded list of string ips on the local machine to try to connect to
     publicKey: text("publicKey"), // TODO: Fix typo in publicKey
     lastHolePunch: integer("lastHolePunch"),
     listenPort: integer("listenPort"),

From 3ac7ef23ae9d136bbaf132850c3af84286001693 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Wed, 15 Jul 2026 20:45:18 -0400
Subject: [PATCH 53/94] Save the local endpoints

---
 server/routers/newt/handleNewtRegisterMessage.ts | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/server/routers/newt/handleNewtRegisterMessage.ts b/server/routers/newt/handleNewtRegisterMessage.ts
index 0dc8380c8..bb77fb53f 100644
--- a/server/routers/newt/handleNewtRegisterMessage.ts
+++ b/server/routers/newt/handleNewtRegisterMessage.ts
@@ -48,7 +48,8 @@ export const handleNewtRegisterMessage: MessageHandler = async (context) => {
         pingResults,
         newtVersion,
         backwardsCompatible,
-        chainId
+        chainId,
+        localEndpoints
     } = message.data;
     if (!publicKey) {
         logger.warn("Public key not provided");
@@ -131,7 +132,8 @@ export const handleNewtRegisterMessage: MessageHandler = async (context) => {
             .set({
                 pubKey: publicKey,
                 exitNodeId: exitNodeId,
-                subnet: newSubnet
+                subnet: newSubnet,
+                localEndpoints: localEndpoints || null
             })
             .where(eq(sites.siteId, siteId))
             .returning();
@@ -139,7 +141,8 @@ export const handleNewtRegisterMessage: MessageHandler = async (context) => {
         await db
             .update(sites)
             .set({
-                pubKey: publicKey
+                pubKey: publicKey,
+                localEndpoints: localEndpoints || null
             })
             .where(eq(sites.siteId, siteId))
             .returning();

From d5eb67a8fc6e26dd5e6de90ab50045bb25840a77 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Thu, 16 Jul 2026 10:47:24 -0400
Subject: [PATCH 54/94] Send localEndpoints on sites to olm

---
 .../routers/newt/handleNewtRegisterMessage.ts |  8 +++--
 server/routers/olm/buildConfiguration.ts      |  4 +++
 .../olm/handleOlmServerPeerAddMessage.ts      | 32 ++++++-------------
 server/routers/olm/peers.ts                   |  2 ++
 4 files changed, 22 insertions(+), 24 deletions(-)

diff --git a/server/routers/newt/handleNewtRegisterMessage.ts b/server/routers/newt/handleNewtRegisterMessage.ts
index bb77fb53f..17a8d955a 100644
--- a/server/routers/newt/handleNewtRegisterMessage.ts
+++ b/server/routers/newt/handleNewtRegisterMessage.ts
@@ -133,7 +133,9 @@ export const handleNewtRegisterMessage: MessageHandler = async (context) => {
                 pubKey: publicKey,
                 exitNodeId: exitNodeId,
                 subnet: newSubnet,
-                localEndpoints: localEndpoints || null
+                localEndpoints: localEndpoints
+                    ? JSON.stringify(localEndpoints)
+                    : null
             })
             .where(eq(sites.siteId, siteId))
             .returning();
@@ -142,7 +144,9 @@ export const handleNewtRegisterMessage: MessageHandler = async (context) => {
             .update(sites)
             .set({
                 pubKey: publicKey,
-                localEndpoints: localEndpoints || null
+                localEndpoints: localEndpoints
+                    ? JSON.stringify(localEndpoints)
+                    : null
             })
             .where(eq(sites.siteId, siteId))
             .returning();
diff --git a/server/routers/olm/buildConfiguration.ts b/server/routers/olm/buildConfiguration.ts
index 0266fa041..37355eae5 100644
--- a/server/routers/olm/buildConfiguration.ts
+++ b/server/routers/olm/buildConfiguration.ts
@@ -30,6 +30,7 @@ export async function buildSiteConfigurationForOlmClient(
         siteId: number;
         name?: string;
         endpoint?: string;
+        localEndpoints?: string[];
         publicKey?: string;
         serverIP?: string | null;
         serverPort?: number | null;
@@ -206,6 +207,9 @@ export async function buildSiteConfigurationForOlmClient(
             name: site.name,
             // relayEndpoint: relayEndpoint, // this can be undefined now if not relayed // lets not do this for now because it would conflict with the hole punch testing
             endpoint: site.endpoint,
+            localEndpoints: site.localEndpoints
+                ? JSON.parse(site.localEndpoints)
+                : undefined,
             publicKey: site.publicKey,
             serverIP: site.address,
             serverPort: site.listenPort,
diff --git a/server/routers/olm/handleOlmServerPeerAddMessage.ts b/server/routers/olm/handleOlmServerPeerAddMessage.ts
index 5f46ea84c..332afe082 100644
--- a/server/routers/olm/handleOlmServerPeerAddMessage.ts
+++ b/server/routers/olm/handleOlmServerPeerAddMessage.ts
@@ -3,24 +3,15 @@ import {
     db,
     networks,
     siteNetworks,
-    siteResources,
+    siteResources
 } from "@server/db";
 import { MessageHandler } from "@server/routers/ws";
-import {
-    clients,
-    clientSitesAssociationsCache,
-    Olm,
-    sites
-} from "@server/db";
+import { clients, clientSitesAssociationsCache, Olm, sites } from "@server/db";
 import { and, eq, inArray, isNotNull, isNull } from "drizzle-orm";
 import logger from "@server/logger";
-import {
-    generateAliasConfig,
-} from "@server/lib/ip";
+import { generateAliasConfig } from "@server/lib/ip";
 import { generateRemoteSubnets } from "@server/lib/ip";
-import {
-    addPeer as newtAddPeer,
-} from "@server/routers/newt/peers";
+import { addPeer as newtAddPeer } from "@server/routers/newt/peers";
 
 export const handleOlmServerPeerAddMessage: MessageHandler = async (
     context
@@ -135,10 +126,7 @@ export const handleOlmServerPeerAddMessage: MessageHandler = async (
                 clientSiteResourcesAssociationsCache.siteResourceId
             )
         )
-        .innerJoin(
-            networks,
-            eq(siteResources.networkId, networks.networkId)
-        )
+        .innerJoin(networks, eq(siteResources.networkId, networks.networkId))
         .innerJoin(
             siteNetworks,
             and(
@@ -147,10 +135,7 @@ export const handleOlmServerPeerAddMessage: MessageHandler = async (
             )
         )
         .where(
-            eq(
-                clientSiteResourcesAssociationsCache.clientId,
-                client.clientId
-            )
+            eq(clientSiteResourcesAssociationsCache.clientId, client.clientId)
         );
 
     // Return connect message with all site configurations
@@ -161,6 +146,9 @@ export const handleOlmServerPeerAddMessage: MessageHandler = async (
                 siteId: site.siteId,
                 name: site.name,
                 endpoint: site.endpoint,
+                localEndpoints: site.localEndpoints
+                    ? JSON.parse(site.localEndpoints)
+                    : undefined,
                 publicKey: site.publicKey,
                 serverIP: site.address,
                 serverPort: site.listenPort,
@@ -170,7 +158,7 @@ export const handleOlmServerPeerAddMessage: MessageHandler = async (
                 aliases: generateAliasConfig(
                     allSiteResources.map(({ siteResources }) => siteResources)
                 ),
-                chainId: chainId,
+                chainId: chainId
             }
         },
         broadcast: false,
diff --git a/server/routers/olm/peers.ts b/server/routers/olm/peers.ts
index 962d7367e..960c6ad23 100644
--- a/server/routers/olm/peers.ts
+++ b/server/routers/olm/peers.ts
@@ -18,6 +18,7 @@ export async function addPeer(
         serverPort: number | null;
         remoteSubnets: string[] | null; // optional, comma-separated list of subnets that this site can access
         aliases: Alias[];
+        localEndpoints?: string[]; // optional, list of local endpoints for the peer
     },
     olmId?: string,
     version?: string | null
@@ -44,6 +45,7 @@ export async function addPeer(
                 name: peer.name,
                 publicKey: peer.publicKey,
                 endpoint: peer.endpoint,
+                localEndpoints: peer.localEndpoints,
                 relayEndpoint: peer.relayEndpoint,
                 serverIP: peer.serverIP,
                 serverPort: peer.serverPort,

From 3a616cc80481443b9e8f244547edb32fe313746f Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Thu, 16 Jul 2026 11:23:17 -0400
Subject: [PATCH 55/94] Add handlers

---
 server/routers/olm/handleOlmLocalMessage.ts   | 74 +++++++++++++++
 server/routers/olm/handleOlmRelayMessage.ts   |  4 +-
 server/routers/olm/handleOlmUnLocalMessage.ts | 95 +++++++++++++++++++
 server/routers/olm/handleOlmUnRelayMessage.ts |  4 +-
 server/routers/olm/index.ts                   |  2 +
 server/routers/ws/messageHandlers.ts          |  6 +-
 6 files changed, 180 insertions(+), 5 deletions(-)
 create mode 100644 server/routers/olm/handleOlmLocalMessage.ts
 create mode 100644 server/routers/olm/handleOlmUnLocalMessage.ts

diff --git a/server/routers/olm/handleOlmLocalMessage.ts b/server/routers/olm/handleOlmLocalMessage.ts
new file mode 100644
index 000000000..83ef8cbf1
--- /dev/null
+++ b/server/routers/olm/handleOlmLocalMessage.ts
@@ -0,0 +1,74 @@
+import { db, sites } from "@server/db";
+import { MessageHandler } from "@server/routers/ws";
+import { clients, Olm } from "@server/db";
+import { and, eq } from "drizzle-orm";
+import { updatePeer as newtUpdatePeer } from "../newt/peers";
+import logger from "@server/logger";
+
+export const handleOlmLocalMessage: MessageHandler = async (context) => {
+    const { message, client: c, sendToClient } = context;
+    const olm = c as Olm;
+
+    logger.info("Handling local olm message!");
+
+    if (!olm) {
+        logger.warn("Olm not found");
+        return;
+    }
+
+    if (!olm.clientId) {
+        logger.warn("Olm has no client!");
+        return;
+    }
+
+    const clientId = olm.clientId;
+
+    const [client] = await db
+        .select()
+        .from(clients)
+        .where(eq(clients.clientId, clientId))
+        .limit(1);
+
+    if (!client) {
+        logger.warn("Client not found");
+        return;
+    }
+
+    // make sure we hand endpoints for both the site and the client and the lastHolePunch is not too old
+    if (!client.pubKey) {
+        logger.warn("Client has no endpoint or listen port");
+        return;
+    }
+
+    const { siteId, chainId } = message.data;
+
+    // Get the site
+    const [site] = await db
+        .select()
+        .from(sites)
+        .where(eq(sites.siteId, siteId))
+        .limit(1);
+
+    if (!site || !site.exitNodeId) {
+        logger.warn("Site not found or has no exit node");
+        return;
+    }
+
+    // update the peer on the newt
+    await newtUpdatePeer(siteId, client.pubKey, {
+        endpoint: "" // this removes the endpoint so the newt knows to accept local
+    });
+
+    // Just ack the message, we don't keep sending it
+    return {
+        message: {
+            type: "olm/wg/peer/local",
+            data: {
+                siteId: siteId,
+                chainId
+            }
+        },
+        broadcast: false,
+        excludeSender: false
+    };
+};
diff --git a/server/routers/olm/handleOlmRelayMessage.ts b/server/routers/olm/handleOlmRelayMessage.ts
index 7196824d2..406ed7bbb 100644
--- a/server/routers/olm/handleOlmRelayMessage.ts
+++ b/server/routers/olm/handleOlmRelayMessage.ts
@@ -79,9 +79,9 @@ export const handleOlmRelayMessage: MessageHandler = async (context) => {
             )
         );
 
-    // update the peer on the exit node
+    // update the peer on the newt
     await newtUpdatePeer(siteId, client.pubKey, {
-        endpoint: "" // this removes the endpoint so the exit node knows to relay
+        endpoint: "" // this removes the endpoint so the newt knows to relay
     });
 
     return {
diff --git a/server/routers/olm/handleOlmUnLocalMessage.ts b/server/routers/olm/handleOlmUnLocalMessage.ts
new file mode 100644
index 000000000..55d312815
--- /dev/null
+++ b/server/routers/olm/handleOlmUnLocalMessage.ts
@@ -0,0 +1,95 @@
+import { db, exitNodes, sites } from "@server/db";
+import { MessageHandler } from "@server/routers/ws";
+import { clients, clientSitesAssociationsCache, Olm } from "@server/db";
+import { and, eq } from "drizzle-orm";
+import { updatePeer as newtUpdatePeer } from "../newt/peers";
+import logger from "@server/logger";
+
+export const handleOlmUnLocalMessage: MessageHandler = async (context) => {
+    const { message, client: c, sendToClient } = context;
+    const olm = c as Olm;
+
+    logger.info("Handling unlocal olm message!");
+
+    if (!olm) {
+        logger.warn("Olm not found");
+        return;
+    }
+
+    if (!olm.clientId) {
+        logger.warn("Olm has no client!");
+        return;
+    }
+
+    const clientId = olm.clientId;
+
+    const [client] = await db
+        .select()
+        .from(clients)
+        .where(eq(clients.clientId, clientId))
+        .limit(1);
+
+    if (!client) {
+        logger.warn("Client not found");
+        return;
+    }
+
+    // make sure we hand endpoints for both the site and the client and the lastHolePunch is not too old
+    if (!client.pubKey) {
+        logger.warn("Client has no endpoint or listen port");
+        return;
+    }
+
+    const { siteId, chainId } = message.data;
+
+    // Get the site
+    const [site] = await db
+        .select()
+        .from(sites)
+        .where(eq(sites.siteId, siteId))
+        .limit(1);
+
+    if (!site) {
+        logger.warn("Site not found or has no exit node");
+        return;
+    }
+
+    const [clientSiteAssociation] = await db
+        .select()
+        .from(clientSitesAssociationsCache)
+        .where(
+            and(
+                eq(clientSitesAssociationsCache.clientId, olm.clientId),
+                eq(clientSitesAssociationsCache.siteId, siteId)
+            )
+        );
+
+    if (!clientSiteAssociation) {
+        logger.warn("Client-Site association not found");
+        return;
+    }
+
+    if (!clientSiteAssociation.endpoint) {
+        logger.warn("Client-Site association has no endpoint, cannot unrelay");
+        return;
+    }
+
+    // update the peer on the newt
+    await newtUpdatePeer(siteId, client.pubKey, {
+        endpoint: clientSiteAssociation.isRelayed
+            ? ""
+            : clientSiteAssociation.endpoint // this is the endpoint of the client to connect directly to the newt
+    });
+
+    return {
+        message: {
+            type: "olm/wg/peer/unlocal",
+            data: {
+                siteId: siteId,
+                chainId
+            }
+        },
+        broadcast: false,
+        excludeSender: false
+    };
+};
diff --git a/server/routers/olm/handleOlmUnRelayMessage.ts b/server/routers/olm/handleOlmUnRelayMessage.ts
index a7b426023..3f73a5834 100644
--- a/server/routers/olm/handleOlmUnRelayMessage.ts
+++ b/server/routers/olm/handleOlmUnRelayMessage.ts
@@ -77,9 +77,9 @@ export const handleOlmUnRelayMessage: MessageHandler = async (context) => {
         return;
     }
 
-    // update the peer on the exit node
+    // update the peer on the newt
     await newtUpdatePeer(siteId, client.pubKey, {
-        endpoint: clientSiteAssociation.endpoint // this is the endpoint of the client to connect directly to the exit node
+        endpoint: clientSiteAssociation.endpoint // this is the endpoint of the client to connect directly to the newt
     });
 
     return {
diff --git a/server/routers/olm/index.ts b/server/routers/olm/index.ts
index 5c151a8cf..e11d4e48e 100644
--- a/server/routers/olm/index.ts
+++ b/server/routers/olm/index.ts
@@ -13,3 +13,5 @@ export * from "./recoverOlmWithFingerprint";
 export * from "./handleOlmDisconnectingMessage";
 export * from "./handleOlmServerInitAddPeerHandshake";
 export * from "./offlineChecker";
+export * from "./handleOlmUnLocalMessage";
+export * from "./handleOlmLocalMessage";
diff --git a/server/routers/ws/messageHandlers.ts b/server/routers/ws/messageHandlers.ts
index f89284389..496002142 100644
--- a/server/routers/ws/messageHandlers.ts
+++ b/server/routers/ws/messageHandlers.ts
@@ -20,7 +20,9 @@ import {
     handleOlmServerPeerAddMessage,
     handleOlmUnRelayMessage,
     handleOlmDisconnectingMessage,
-    handleOlmServerInitAddPeerHandshake
+    handleOlmServerInitAddPeerHandshake,
+    handleOlmLocalMessage,
+    handleOlmUnLocalMessage
 } from "../olm";
 import { handleHealthcheckStatusMessage } from "../target";
 import { handleRoundTripMessage } from "./handleRoundTripMessage";
@@ -32,6 +34,8 @@ export const messageHandlers: Record<string, MessageHandler> = {
     "olm/wg/register": handleOlmRegisterMessage,
     "olm/wg/relay": handleOlmRelayMessage,
     "olm/wg/unrelay": handleOlmUnRelayMessage,
+    "olm/wg/local": handleOlmLocalMessage,
+    "olm/wg/unlocal": handleOlmUnLocalMessage,
     "olm/ping": handleOlmPingMessage,
     "olm/disconnecting": handleOlmDisconnectingMessage,
     "newt/disconnecting": handleNewtDisconnectingMessage,

From 6135f2b72713407d4a7ac4471ad7d5ce662e0746 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Thu, 16 Jul 2026 14:43:45 -0400
Subject: [PATCH 56/94] Local endpoints from the get config

---
 server/routers/newt/handleNewtGetConfigMessage.ts |  7 +++++--
 server/routers/newt/handleNewtRegisterMessage.ts  | 13 +++----------
 2 files changed, 8 insertions(+), 12 deletions(-)

diff --git a/server/routers/newt/handleNewtGetConfigMessage.ts b/server/routers/newt/handleNewtGetConfigMessage.ts
index fd5e2b42e..d99dd89ef 100644
--- a/server/routers/newt/handleNewtGetConfigMessage.ts
+++ b/server/routers/newt/handleNewtGetConfigMessage.ts
@@ -29,7 +29,7 @@ export const handleNewtGetConfigMessage: MessageHandler = async (context) => {
         return;
     }
 
-    const { publicKey, port, chainId } = message.data;
+    const { publicKey, port, localEndpoints, chainId } = message.data;
     const siteId = newt.siteId;
 
     // Get the current site data
@@ -69,7 +69,10 @@ export const handleNewtGetConfigMessage: MessageHandler = async (context) => {
         .update(sites)
         .set({
             publicKey,
-            listenPort: port
+            listenPort: port,
+            localEndpoints: localEndpoints
+                ? JSON.stringify(localEndpoints)
+                : null
         })
         .where(eq(sites.siteId, siteId))
         .returning();
diff --git a/server/routers/newt/handleNewtRegisterMessage.ts b/server/routers/newt/handleNewtRegisterMessage.ts
index 17a8d955a..0dc8380c8 100644
--- a/server/routers/newt/handleNewtRegisterMessage.ts
+++ b/server/routers/newt/handleNewtRegisterMessage.ts
@@ -48,8 +48,7 @@ export const handleNewtRegisterMessage: MessageHandler = async (context) => {
         pingResults,
         newtVersion,
         backwardsCompatible,
-        chainId,
-        localEndpoints
+        chainId
     } = message.data;
     if (!publicKey) {
         logger.warn("Public key not provided");
@@ -132,10 +131,7 @@ export const handleNewtRegisterMessage: MessageHandler = async (context) => {
             .set({
                 pubKey: publicKey,
                 exitNodeId: exitNodeId,
-                subnet: newSubnet,
-                localEndpoints: localEndpoints
-                    ? JSON.stringify(localEndpoints)
-                    : null
+                subnet: newSubnet
             })
             .where(eq(sites.siteId, siteId))
             .returning();
@@ -143,10 +139,7 @@ export const handleNewtRegisterMessage: MessageHandler = async (context) => {
         await db
             .update(sites)
             .set({
-                pubKey: publicKey,
-                localEndpoints: localEndpoints
-                    ? JSON.stringify(localEndpoints)
-                    : null
+                pubKey: publicKey
             })
             .where(eq(sites.siteId, siteId))
             .returning();

From 3c9f0946d2df6db8199fb654fd1b2c50a1839464 Mon Sep 17 00:00:00 2001
From: miloschwartz <mschwartz10612@gmail.com>
Date: Thu, 16 Jul 2026 17:56:31 -0400
Subject: [PATCH 57/94] add site provisioning keys to integration api

---
 messages/en-US.json                           |   4 +
 server/middlewares/integration/index.ts       |   1 +
 .../verifyApiKeySiteProvisioningKeyAccess.ts  | 111 ++++++++++++++++++
 server/openApi.ts                             |   1 +
 server/private/routers/integration.ts         |  44 +++++++
 .../createSiteProvisioningKey.ts              |  60 +++++++++-
 .../deleteSiteProvisioningKey.ts              |  33 +++++-
 .../listSiteProvisioningKeys.ts               |  56 +++++++--
 .../updateSiteProvisioningKey.ts              |  61 ++++++++--
 src/components/PermissionsSelectBox.tsx       |   7 ++
 10 files changed, 355 insertions(+), 23 deletions(-)
 create mode 100644 server/middlewares/integration/verifyApiKeySiteProvisioningKeyAccess.ts

diff --git a/messages/en-US.json b/messages/en-US.json
index 6893b41fa..678c73ebd 100644
--- a/messages/en-US.json
+++ b/messages/en-US.json
@@ -1511,6 +1511,10 @@
     "actionListInvitations": "List Invitations",
     "actionExportLogs": "Export Logs",
     "actionViewLogs": "View Logs",
+    "actionCreateSiteProvisioningKey": "Create Site Provisioning Key",
+    "actionListSiteProvisioningKeys": "List Site Provisioning Keys",
+    "actionUpdateSiteProvisioningKey": "Update Site Provisioning Key",
+    "actionDeleteSiteProvisioningKey": "Delete Site Provisioning Key",
     "noneSelected": "None selected",
     "orgNotFound2": "No organizations found.",
     "search": "Search…",
diff --git a/server/middlewares/integration/index.ts b/server/middlewares/integration/index.ts
index d43854eab..be9d400cf 100644
--- a/server/middlewares/integration/index.ts
+++ b/server/middlewares/integration/index.ts
@@ -17,3 +17,4 @@ export * from "./verifyApiKeySiteResourceAccess";
 export * from "./verifyApiKeyIdpAccess";
 export * from "./verifyApiKeyDomainAccess";
 export * from "./verifyApiKeyResourcePolicyAccess";
+export * from "./verifyApiKeySiteProvisioningKeyAccess";
diff --git a/server/middlewares/integration/verifyApiKeySiteProvisioningKeyAccess.ts b/server/middlewares/integration/verifyApiKeySiteProvisioningKeyAccess.ts
new file mode 100644
index 000000000..d1982ad3c
--- /dev/null
+++ b/server/middlewares/integration/verifyApiKeySiteProvisioningKeyAccess.ts
@@ -0,0 +1,111 @@
+import { Request, Response, NextFunction } from "express";
+import {
+    db,
+    siteProvisioningKeys,
+    siteProvisioningKeyOrg,
+    apiKeyOrg
+} from "@server/db";
+import { and, eq } from "drizzle-orm";
+import createHttpError from "http-errors";
+import HttpCode from "@server/types/HttpCode";
+import { getFirstString } from "@server/lib/requestParams";
+
+export async function verifyApiKeySiteProvisioningKeyAccess(
+    req: Request,
+    res: Response,
+    next: NextFunction
+) {
+    try {
+        const apiKey = req.apiKey;
+        const siteProvisioningKeyId =
+            getFirstString(req.params.siteProvisioningKeyId) ||
+            getFirstString(req.body.siteProvisioningKeyId) ||
+            getFirstString(req.query.siteProvisioningKeyId);
+        const orgId = getFirstString(req.params.orgId);
+
+        if (!apiKey) {
+            return next(
+                createHttpError(HttpCode.UNAUTHORIZED, "Key not authenticated")
+            );
+        }
+
+        if (!orgId) {
+            return next(
+                createHttpError(HttpCode.BAD_REQUEST, "Invalid organization ID")
+            );
+        }
+
+        if (!siteProvisioningKeyId) {
+            return next(
+                createHttpError(HttpCode.BAD_REQUEST, "Invalid key ID")
+            );
+        }
+
+        if (apiKey.isRoot) {
+            // Root keys can access any site provisioning key in any org
+            return next();
+        }
+
+        const [row] = await db
+            .select()
+            .from(siteProvisioningKeys)
+            .innerJoin(
+                siteProvisioningKeyOrg,
+                and(
+                    eq(
+                        siteProvisioningKeys.siteProvisioningKeyId,
+                        siteProvisioningKeyOrg.siteProvisioningKeyId
+                    ),
+                    eq(siteProvisioningKeyOrg.orgId, orgId)
+                )
+            )
+            .where(
+                eq(
+                    siteProvisioningKeys.siteProvisioningKeyId,
+                    siteProvisioningKeyId
+                )
+            )
+            .limit(1);
+
+        if (!row?.siteProvisioningKeys || !row.siteProvisioningKeyOrg) {
+            return next(
+                createHttpError(
+                    HttpCode.NOT_FOUND,
+                    `Site provisioning key with ID ${siteProvisioningKeyId} not found for organization ${orgId}`
+                )
+            );
+        }
+
+        if (!req.apiKeyOrg) {
+            const apiKeyOrgRes = await db
+                .select()
+                .from(apiKeyOrg)
+                .where(
+                    and(
+                        eq(apiKeyOrg.apiKeyId, apiKey.apiKeyId),
+                        eq(apiKeyOrg.orgId, row.siteProvisioningKeyOrg.orgId)
+                    )
+                )
+                .limit(1);
+            req.apiKeyOrg = apiKeyOrgRes[0];
+        }
+
+        if (!req.apiKeyOrg) {
+            return next(
+                createHttpError(
+                    HttpCode.FORBIDDEN,
+                    "Key does not have access to this organization"
+                )
+            );
+        }
+
+        return next();
+    } catch (error) {
+        return next(
+            createHttpError(
+                HttpCode.INTERNAL_SERVER_ERROR,
+                "Error verifying site provisioning key access"
+            )
+        );
+    }
+}
diff --git a/server/openApi.ts b/server/openApi.ts
index 7132a0327..63625192d 100644
--- a/server/openApi.ts
+++ b/server/openApi.ts
@@ -18,6 +18,7 @@ export enum OpenAPITags {
     OrgIdp = "Identity Provider (Organization Only)",
     Client = "Client",
     ApiKey = "API Key",
+    SiteProvisioningKey = "Site Provisioning Key",
     Domain = "Domain",
     Blueprint = "Blueprint",
     Ssh = "SSH",
diff --git a/server/private/routers/integration.ts b/server/private/routers/integration.ts
index 820a843f0..b613b2f27 100644
--- a/server/private/routers/integration.ts
+++ b/server/private/routers/integration.ts
@@ -16,6 +16,7 @@ import * as org from "#private/routers/org";
 import * as logs from "#private/routers/auditLogs";
 import * as alertEvents from "#private/routers/alertEvents";
 import * as certificates from "#private/routers/certificates";
+import * as siteProvisioning from "#private/routers/siteProvisioning";
 
 import {
     verifyApiKeyHasAction,
@@ -24,6 +25,7 @@ import {
     verifyApiKeyIdpAccess,
     verifyApiKeyRoleAccess,
     verifyApiKeyUserAccess,
+    verifyApiKeySiteProvisioningKeyAccess,
     verifyLimits
 } from "@server/middlewares";
 import * as user from "#private/routers/user";
@@ -215,3 +217,45 @@ authenticated.delete(
     logActionAudit(ActionsEnum.removeUserRole),
     user.removeUserRole
 );
+
+authenticated.put(
+    "/org/:orgId/site-provisioning-key",
+    verifyValidLicense,
+    verifyValidSubscription(tierMatrix.siteProvisioningKeys),
+    verifyApiKeyOrgAccess,
+    verifyLimits,
+    verifyApiKeyHasAction(ActionsEnum.createSiteProvisioningKey),
+    logActionAudit(ActionsEnum.createSiteProvisioningKey),
+    siteProvisioning.createSiteProvisioningKey
+);
+
+authenticated.get(
+    "/org/:orgId/site-provisioning-keys",
+    verifyValidLicense,
+    verifyValidSubscription(tierMatrix.siteProvisioningKeys),
+    verifyApiKeyOrgAccess,
+    verifyApiKeyHasAction(ActionsEnum.listSiteProvisioningKeys),
+    siteProvisioning.listSiteProvisioningKeys
+);
+
+authenticated.delete(
+    "/org/:orgId/site-provisioning-key/:siteProvisioningKeyId",
+    verifyValidLicense,
+    verifyValidSubscription(tierMatrix.siteProvisioningKeys),
+    verifyApiKeyOrgAccess,
+    verifyApiKeySiteProvisioningKeyAccess,
+    verifyApiKeyHasAction(ActionsEnum.deleteSiteProvisioningKey),
+    logActionAudit(ActionsEnum.deleteSiteProvisioningKey),
+    siteProvisioning.deleteSiteProvisioningKey
+);
+
+authenticated.patch(
+    "/org/:orgId/site-provisioning-key/:siteProvisioningKeyId",
+    verifyValidLicense,
+    verifyValidSubscription(tierMatrix.siteProvisioningKeys),
+    verifyApiKeyOrgAccess,
+    verifyApiKeySiteProvisioningKeyAccess,
+    verifyApiKeyHasAction(ActionsEnum.updateSiteProvisioningKey),
+    logActionAudit(ActionsEnum.updateSiteProvisioningKey),
+    siteProvisioning.updateSiteProvisioningKey
+);
diff --git a/server/private/routers/siteProvisioning/createSiteProvisioningKey.ts b/server/private/routers/siteProvisioning/createSiteProvisioningKey.ts
index f5b64c0f3..b810ebe4f 100644
--- a/server/private/routers/siteProvisioning/createSiteProvisioningKey.ts
+++ b/server/private/routers/siteProvisioning/createSiteProvisioningKey.ts
@@ -26,6 +26,8 @@ import {
 import logger from "@server/logger";
 import { hashPassword } from "@server/auth/password";
 import type { CreateSiteProvisioningKeyResponse } from "@server/routers/siteProvisioning/types";
+import { createApiResponseSchema } from "@server/lib/openapi/createApiResponseSchema";
+import { OpenAPITags, registry } from "@server/openApi";
 
 const paramsSchema = z.object({
     orgId: z.string().nonempty()
@@ -34,10 +36,17 @@ const paramsSchema = z.object({
 const bodySchema = z
     .strictObject({
         name: z.string().min(1).max(255),
-        maxBatchSize: z.union([
-            z.null(),
-            z.coerce.number().int().positive().max(1_000_000)
-        ]),
+        maxBatchSize: z
+            .union([
+                z.null(),
+                z.coerce.number().int().positive().max(1_000_000)
+            ])
+            .openapi({
+                type: "number",
+                default: null,
+                description:
+                    "Maximum number of sites that can be provisioned in a single batch. If null, there is no limit."
+            }),
         validUntil: z.string().max(255).optional(),
         approveNewSites: z.boolean().optional().default(true)
     })
@@ -57,6 +66,49 @@ const bodySchema = z
 
 export type CreateSiteProvisioningKeyBody = z.infer<typeof bodySchema>;
 
+const CreateSiteProvisioningKeyResponseDataSchema = z.object({
+    siteProvisioningKeyId: z.string(),
+    orgId: z.string(),
+    name: z.string(),
+    siteProvisioningKey: z.string(),
+    lastChars: z.string(),
+    createdAt: z.string(),
+    lastUsed: z.string().nullable(),
+    maxBatchSize: z.number().nullable(),
+    numUsed: z.number(),
+    validUntil: z.string().nullable(),
+    approveNewSites: z.boolean()
+});
+
+registry.registerPath({
+    method: "put",
+    path: "/org/{orgId}/site-provisioning-key",
+    description: "Create a new site provisioning key for the organization.",
+    tags: [OpenAPITags.SiteProvisioningKey],
+    request: {
+        params: paramsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: bodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        201: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: createApiResponseSchema(
+                        CreateSiteProvisioningKeyResponseDataSchema
+                    )
+                }
+            }
+        }
+    }
+});
+
 export async function createSiteProvisioningKey(
     req: Request,
     res: Response,
diff --git a/server/private/routers/siteProvisioning/deleteSiteProvisioningKey.ts b/server/private/routers/siteProvisioning/deleteSiteProvisioningKey.ts
index 61fa0a850..9c77c93ca 100644
--- a/server/private/routers/siteProvisioning/deleteSiteProvisioningKey.ts
+++ b/server/private/routers/siteProvisioning/deleteSiteProvisioningKey.ts
@@ -13,23 +13,46 @@
 
 import { Request, Response, NextFunction } from "express";
 import { z } from "zod";
-import {
-    db,
-    siteProvisioningKeyOrg,
-    siteProvisioningKeys
-} from "@server/db";
+import { db, siteProvisioningKeyOrg, siteProvisioningKeys } from "@server/db";
 import { and, eq } from "drizzle-orm";
 import response from "@server/lib/response";
 import HttpCode from "@server/types/HttpCode";
 import createHttpError from "http-errors";
 import logger from "@server/logger";
 import { fromError } from "zod-validation-error";
+import { OpenAPITags, registry } from "@server/openApi";
 
 const paramsSchema = z.object({
     siteProvisioningKeyId: z.string().nonempty(),
     orgId: z.string().nonempty()
 });
 
+registry.registerPath({
+    method: "delete",
+    path: "/org/{orgId}/site-provisioning-key/{siteProvisioningKeyId}",
+    description: "Delete a site provisioning key.",
+    tags: [OpenAPITags.SiteProvisioningKey],
+    request: {
+        params: paramsSchema
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function deleteSiteProvisioningKey(
     req: Request,
     res: Response,
diff --git a/server/private/routers/siteProvisioning/listSiteProvisioningKeys.ts b/server/private/routers/siteProvisioning/listSiteProvisioningKeys.ts
index 0e9838b24..63ab4429a 100644
--- a/server/private/routers/siteProvisioning/listSiteProvisioningKeys.ts
+++ b/server/private/routers/siteProvisioning/listSiteProvisioningKeys.ts
@@ -11,11 +11,7 @@
  * This file is not licensed under the AGPLv3.
  */
 
-import {
-    db,
-    siteProvisioningKeyOrg,
-    siteProvisioningKeys
-} from "@server/db";
+import { db, siteProvisioningKeyOrg, siteProvisioningKeys } from "@server/db";
 import logger from "@server/logger";
 import HttpCode from "@server/types/HttpCode";
 import response from "@server/lib/response";
@@ -25,6 +21,8 @@ import { z } from "zod";
 import { fromError } from "zod-validation-error";
 import { eq } from "drizzle-orm";
 import type { ListSiteProvisioningKeysResponse } from "@server/routers/siteProvisioning/types";
+import { createApiResponseSchema } from "@server/lib/openapi/createApiResponseSchema";
+import { OpenAPITags, registry } from "@server/openApi";
 
 const paramsSchema = z.object({
     orgId: z.string().nonempty()
@@ -45,11 +43,55 @@ const querySchema = z.object({
         .pipe(z.int().nonnegative())
 });
 
+const ListSiteProvisioningKeysResponseDataSchema = z.object({
+    siteProvisioningKeys: z.array(
+        z.object({
+            siteProvisioningKeyId: z.string(),
+            orgId: z.string(),
+            lastChars: z.string(),
+            createdAt: z.string(),
+            name: z.string(),
+            lastUsed: z.string().nullable(),
+            maxBatchSize: z.number().nullable(),
+            numUsed: z.number(),
+            validUntil: z.string().nullable(),
+            approveNewSites: z.boolean()
+        })
+    ),
+    pagination: z.object({
+        total: z.number(),
+        limit: z.number(),
+        offset: z.number()
+    })
+});
+
+registry.registerPath({
+    method: "get",
+    path: "/org/{orgId}/site-provisioning-keys",
+    description: "List all site provisioning keys for an organization.",
+    tags: [OpenAPITags.SiteProvisioningKey],
+    request: {
+        params: paramsSchema,
+        query: querySchema
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: createApiResponseSchema(
+                        ListSiteProvisioningKeysResponseDataSchema
+                    )
+                }
+            }
+        }
+    }
+});
+
 function querySiteProvisioningKeys(orgId: string) {
     return db
         .select({
-            siteProvisioningKeyId:
-                siteProvisioningKeys.siteProvisioningKeyId,
+            siteProvisioningKeyId: siteProvisioningKeys.siteProvisioningKeyId,
             orgId: siteProvisioningKeyOrg.orgId,
             lastChars: siteProvisioningKeys.lastChars,
             createdAt: siteProvisioningKeys.createdAt,
diff --git a/server/private/routers/siteProvisioning/updateSiteProvisioningKey.ts b/server/private/routers/siteProvisioning/updateSiteProvisioningKey.ts
index cee40212a..f97389b2b 100644
--- a/server/private/routers/siteProvisioning/updateSiteProvisioningKey.ts
+++ b/server/private/routers/siteProvisioning/updateSiteProvisioningKey.ts
@@ -13,11 +13,7 @@
 
 import { Request, Response, NextFunction } from "express";
 import { z } from "zod";
-import {
-    db,
-    siteProvisioningKeyOrg,
-    siteProvisioningKeys
-} from "@server/db";
+import { db, siteProvisioningKeyOrg, siteProvisioningKeys } from "@server/db";
 import { and, eq } from "drizzle-orm";
 import response from "@server/lib/response";
 import HttpCode from "@server/types/HttpCode";
@@ -25,6 +21,8 @@ import createHttpError from "http-errors";
 import logger from "@server/logger";
 import { fromError } from "zod-validation-error";
 import type { UpdateSiteProvisioningKeyResponse } from "@server/routers/siteProvisioning/types";
+import { createApiResponseSchema } from "@server/lib/openapi/createApiResponseSchema";
+import { OpenAPITags, registry } from "@server/openApi";
 
 const paramsSchema = z.object({
     siteProvisioningKeyId: z.string().nonempty(),
@@ -38,7 +36,13 @@ const bodySchema = z
                 z.null(),
                 z.coerce.number().int().positive().max(1_000_000)
             ])
-            .optional(),
+            .optional()
+            .openapi({
+                type: "number",
+                default: null,
+                description:
+                    "Maximum number of sites that can be provisioned in a single batch. If null, there is no limit."
+            }),
         validUntil: z.string().max(255).optional(),
         approveNewSites: z.boolean().optional()
     })
@@ -50,7 +54,8 @@ const bodySchema = z
         ) {
             ctx.addIssue({
                 code: "custom",
-                message: "Provide maxBatchSize and/or validUntil and/or approveNewSites",
+                message:
+                    "Provide maxBatchSize and/or validUntil and/or approveNewSites",
                 path: ["maxBatchSize"]
             });
         }
@@ -69,6 +74,48 @@ const bodySchema = z
 
 export type UpdateSiteProvisioningKeyBody = z.infer<typeof bodySchema>;
 
+const UpdateSiteProvisioningKeyResponseDataSchema = z.object({
+    siteProvisioningKeyId: z.string(),
+    orgId: z.string(),
+    name: z.string(),
+    lastChars: z.string(),
+    createdAt: z.string(),
+    lastUsed: z.string().nullable(),
+    maxBatchSize: z.number().nullable(),
+    numUsed: z.number(),
+    validUntil: z.string().nullable(),
+    approveNewSites: z.boolean()
+});
+
+registry.registerPath({
+    method: "patch",
+    path: "/org/{orgId}/site-provisioning-key/{siteProvisioningKeyId}",
+    description: "Update a site provisioning key.",
+    tags: [OpenAPITags.SiteProvisioningKey],
+    request: {
+        params: paramsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: bodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: createApiResponseSchema(
+                        UpdateSiteProvisioningKeyResponseDataSchema
+                    )
+                }
+            }
+        }
+    }
+});
+
 export async function updateSiteProvisioningKey(
     req: Request,
     res: Response,
diff --git a/src/components/PermissionsSelectBox.tsx b/src/components/PermissionsSelectBox.tsx
index 48a492c31..48868722e 100644
--- a/src/components/PermissionsSelectBox.tsx
+++ b/src/components/PermissionsSelectBox.tsx
@@ -143,6 +143,13 @@ function getActionsCategories(root: boolean) {
         Logs: {
             [t("actionExportLogs")]: "exportLogs",
             [t("actionViewLogs")]: "viewLogs"
+        },
+
+        "Site Provisioning Key": {
+            [t("actionCreateSiteProvisioningKey")]: "createSiteProvisioningKey",
+            [t("actionListSiteProvisioningKeys")]: "listSiteProvisioningKeys",
+            [t("actionUpdateSiteProvisioningKey")]: "updateSiteProvisioningKey",
+            [t("actionDeleteSiteProvisioningKey")]: "deleteSiteProvisioningKey"
         }
     };
 

From a30119f5e875604e050105fcb37a8aeb787e1d58 Mon Sep 17 00:00:00 2001
From: miloschwartz <mschwartz10612@gmail.com>
Date: Thu, 16 Jul 2026 21:28:36 -0400
Subject: [PATCH 58/94] encode email in url param

---
 server/routers/auth/requestPasswordReset.ts   |  2 +-
 .../user/adminGeneratePasswordResetCode.ts    |  2 +-
 server/routers/user/inviteUser.ts             |  4 +--
 src/components/InviteStatusCard.tsx           | 28 +++++++++++++------
 4 files changed, 24 insertions(+), 12 deletions(-)

diff --git a/server/routers/auth/requestPasswordReset.ts b/server/routers/auth/requestPasswordReset.ts
index 42b53d24d..aca435c7b 100644
--- a/server/routers/auth/requestPasswordReset.ts
+++ b/server/routers/auth/requestPasswordReset.ts
@@ -99,7 +99,7 @@ export async function requestPasswordReset(
             });
         });
 
-        const url = `${config.getRawConfig().app.dashboard_url}/auth/reset-password?email=${email}&token=${token}`;
+        const url = `${config.getRawConfig().app.dashboard_url}/auth/reset-password?email=${encodeURIComponent(email)}&token=${token}`;
 
         if (!config.getRawConfig().email) {
             logger.info(
diff --git a/server/routers/user/adminGeneratePasswordResetCode.ts b/server/routers/user/adminGeneratePasswordResetCode.ts
index 562a459e1..7ba8ce9df 100644
--- a/server/routers/user/adminGeneratePasswordResetCode.ts
+++ b/server/routers/user/adminGeneratePasswordResetCode.ts
@@ -94,7 +94,7 @@ export async function adminGeneratePasswordResetCode(
             });
         });
 
-        const url = `${config.getRawConfig().app.dashboard_url}/auth/reset-password?email=${existingUser[0].email}&token=${token}`;
+        const url = `${config.getRawConfig().app.dashboard_url}/auth/reset-password?email=${encodeURIComponent(existingUser[0].email!)}&token=${token}`;
 
         logger.info(
             `Admin generated password reset code for user ${existingUser[0].email} (${userId})`
diff --git a/server/routers/user/inviteUser.ts b/server/routers/user/inviteUser.ts
index 7445ee910..7b7ae9250 100644
--- a/server/routers/user/inviteUser.ts
+++ b/server/routers/user/inviteUser.ts
@@ -287,7 +287,7 @@ export async function inviteUser(
                     )
                 );
 
-            const inviteLink = `${config.getRawConfig().app.dashboard_url}/invite?token=${inviteId}-${token}&email=${email}`;
+            const inviteLink = `${config.getRawConfig().app.dashboard_url}/invite?token=${inviteId}-${token}&email=${encodeURIComponent(email)}`;
 
             if (doEmail) {
                 await sendEmail(
@@ -341,7 +341,7 @@ export async function inviteUser(
                 .values(uniqueRoleIds.map((roleId) => ({ inviteId, roleId })));
         });
 
-        const inviteLink = `${config.getRawConfig().app.dashboard_url}/invite?token=${inviteId}-${token}&email=${email}`;
+        const inviteLink = `${config.getRawConfig().app.dashboard_url}/invite?token=${inviteId}-${token}&email=${encodeURIComponent(email)}`;
 
         if (doEmail) {
             await sendEmail(
diff --git a/src/components/InviteStatusCard.tsx b/src/components/InviteStatusCard.tsx
index 40b7123e7..790249904 100644
--- a/src/components/InviteStatusCard.tsx
+++ b/src/components/InviteStatusCard.tsx
@@ -93,14 +93,20 @@ export default function InviteStatusCard({
             setType(type);
 
             if (!user && type === "user_does_not_exist") {
+                const inviteRedirect = encodeURIComponent(
+                    `/invite?token=${tokenParam}`
+                );
                 const redirectUrl = email
-                    ? `/auth/signup?redirect=/invite?token=${tokenParam}&email=${email}`
-                    : `/auth/signup?redirect=/invite?token=${tokenParam}`;
+                    ? `/auth/signup?redirect=${inviteRedirect}&email=${encodeURIComponent(email)}`
+                    : `/auth/signup?redirect=${inviteRedirect}`;
                 router.push(redirectUrl);
             } else if (!user && type === "not_logged_in") {
+                const inviteRedirect = encodeURIComponent(
+                    `/invite?token=${tokenParam}`
+                );
                 const redirectUrl = email
-                    ? `/auth/login?redirect=/invite?token=${tokenParam}&user=${email}`
-                    : `/auth/login?redirect=/invite?token=${tokenParam}`;
+                    ? `/auth/login?redirect=${inviteRedirect}&user=${encodeURIComponent(email)}`
+                    : `/auth/login?redirect=${inviteRedirect}`;
                 router.push(redirectUrl);
             } else {
                 setLoading(false);
@@ -112,17 +118,23 @@ export default function InviteStatusCard({
 
     async function goToLogin() {
         await api.post("/auth/logout", {});
+        const inviteRedirect = encodeURIComponent(
+            `/invite?token=${tokenParam}`
+        );
         const redirectUrl = email
-            ? `/auth/login?redirect=/invite?token=${tokenParam}&user=${email}`
-            : `/auth/login?redirect=/invite?token=${tokenParam}`;
+            ? `/auth/login?redirect=${inviteRedirect}&user=${encodeURIComponent(email)}`
+            : `/auth/login?redirect=${inviteRedirect}`;
         router.push(redirectUrl);
     }
 
     async function goToSignup() {
         await api.post("/auth/logout", {});
+        const inviteRedirect = encodeURIComponent(
+            `/invite?token=${tokenParam}`
+        );
         const redirectUrl = email
-            ? `/auth/signup?redirect=/invite?token=${tokenParam}&email=${email}`
-            : `/auth/signup?redirect=/invite?token=${tokenParam}`;
+            ? `/auth/signup?redirect=${inviteRedirect}&email=${encodeURIComponent(email)}`
+            : `/auth/signup?redirect=${inviteRedirect}`;
         router.push(redirectUrl);
     }
 

From 9e50735800d6535f4b97eeb9432af89f91834005 Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Thu, 16 Jul 2026 21:34:29 -0400
Subject: [PATCH 59/94] New translations en-us.json (French)

[ci skip]
---
 messages/fr-FR.json | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/messages/fr-FR.json b/messages/fr-FR.json
index ec24ec4d1..5a931fa70 100644
--- a/messages/fr-FR.json
+++ b/messages/fr-FR.json
@@ -1511,6 +1511,10 @@
     "actionListInvitations": "Lister les invitations",
     "actionExportLogs": "Exporter les journaux",
     "actionViewLogs": "Voir les logs",
+    "actionCreateSiteProvisioningKey": "Créer une clé de provisionnement de site",
+    "actionListSiteProvisioningKeys": "Lister les clés de provisionnement de site",
+    "actionUpdateSiteProvisioningKey": "Mettre à jour la clé de provisionnement de site",
+    "actionDeleteSiteProvisioningKey": "Supprimer la clé de provisionnement de site",
     "noneSelected": "Aucune sélection",
     "orgNotFound2": "Aucune organisation trouvée.",
     "search": "Rechercher…",
@@ -3811,5 +3815,6 @@
     "rdpUploadFailed": "Échec du téléchargement",
     "rdpUnicodeKeyboardMode": "Mode clavier Unicode",
     "sessionToolbarShow": "Afficher la barre d'outils",
-    "sessionToolbarHide": "Masquer la barre d'outils"
+    "sessionToolbarHide": "Masquer la barre d'outils",
+    "actionUpdateSiteApprovals": "Mettre à jour les approbations de site"
 }

From 6df804ab3247c86667a0af8e4ae9c302a175f01e Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Thu, 16 Jul 2026 21:34:31 -0400
Subject: [PATCH 60/94] New translations en-us.json (Spanish)

[ci skip]
---
 messages/es-ES.json | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/messages/es-ES.json b/messages/es-ES.json
index d7453592a..e677252a0 100644
--- a/messages/es-ES.json
+++ b/messages/es-ES.json
@@ -1511,6 +1511,10 @@
     "actionListInvitations": "Listar invitaciones",
     "actionExportLogs": "Exportar registros",
     "actionViewLogs": "Ver registros",
+    "actionCreateSiteProvisioningKey": "Crear clave de aprovisionamiento del sitio",
+    "actionListSiteProvisioningKeys": "Listado de claves de aprovisionamiento del sitio",
+    "actionUpdateSiteProvisioningKey": "Actualizar clave de aprovisionamiento del sitio",
+    "actionDeleteSiteProvisioningKey": "Eliminar clave de aprovisionamiento del sitio",
     "noneSelected": "Ninguno seleccionado",
     "orgNotFound2": "No se encontraron organizaciones.",
     "search": "Buscar…",
@@ -3811,5 +3815,6 @@
     "rdpUploadFailed": "Error de subida",
     "rdpUnicodeKeyboardMode": "Modo teclado Unicode",
     "sessionToolbarShow": "Mostrar barra de herramientas",
-    "sessionToolbarHide": "Ocultar barra de herramientas"
+    "sessionToolbarHide": "Ocultar barra de herramientas",
+    "actionUpdateSiteApprovals": "Actualizar aprobaciones del sitio"
 }

From f9bcb25eaaa3ffc274647d4289850a7ce085cefa Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Thu, 16 Jul 2026 21:34:33 -0400
Subject: [PATCH 61/94] New translations en-us.json (Bulgarian)

[ci skip]
---
 messages/bg-BG.json | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/messages/bg-BG.json b/messages/bg-BG.json
index 25e192fec..4bf0d9ab6 100644
--- a/messages/bg-BG.json
+++ b/messages/bg-BG.json
@@ -1511,6 +1511,10 @@
     "actionListInvitations": "Списък с покани",
     "actionExportLogs": "Експортиране на дневници",
     "actionViewLogs": "Преглед на дневници",
+    "actionCreateSiteProvisioningKey": "Създаване на ключ за предоставяне на сайт",
+    "actionListSiteProvisioningKeys": "Списък на ключовете за предоставяне на сайт",
+    "actionUpdateSiteProvisioningKey": "Актуализиране на ключ за предоставяне на сайт",
+    "actionDeleteSiteProvisioningKey": "Изтриване на ключ за предоставяне на сайт",
     "noneSelected": "Нищо не е избрано",
     "orgNotFound2": "Няма намерени организации.",
     "search": "Търси…",
@@ -3811,5 +3815,6 @@
     "rdpUploadFailed": "Качването неуспешно",
     "rdpUnicodeKeyboardMode": "Режим на unicode клавиатура",
     "sessionToolbarShow": "Показване на лентата с инструменти",
-    "sessionToolbarHide": "Скриване на лентата с инструменти"
+    "sessionToolbarHide": "Скриване на лентата с инструменти",
+    "actionUpdateSiteApprovals": "Обновяване на одобренията на сайта"
 }

From 61a7dda29a287b8e1b0c787b6bdcec6bad42ba49 Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Thu, 16 Jul 2026 21:34:35 -0400
Subject: [PATCH 62/94] New translations en-us.json (Czech)

[ci skip]
---
 messages/cs-CZ.json | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/messages/cs-CZ.json b/messages/cs-CZ.json
index f440a8e38..0d96a80cd 100644
--- a/messages/cs-CZ.json
+++ b/messages/cs-CZ.json
@@ -1511,6 +1511,10 @@
     "actionListInvitations": "Seznam pozvánek",
     "actionExportLogs": "Exportovat protokoly",
     "actionViewLogs": "Zobrazit logy",
+    "actionCreateSiteProvisioningKey": "Vytvořit klíč pro zřízení webu",
+    "actionListSiteProvisioningKeys": "Seznam klíčů pro zřízení webu",
+    "actionUpdateSiteProvisioningKey": "Aktualizovat klíč pro zřízení webu",
+    "actionDeleteSiteProvisioningKey": "Smazat klíč pro zřízení webu",
     "noneSelected": "Není vybráno",
     "orgNotFound2": "Nebyly nalezeny žádné organizace.",
     "search": "Vyhledávání…",
@@ -3811,5 +3815,6 @@
     "rdpUploadFailed": "Nahrání selhalo",
     "rdpUnicodeKeyboardMode": "Režim Unicode klávesnice",
     "sessionToolbarShow": "Zobrazit panel nástrojů",
-    "sessionToolbarHide": "Skrýt panel nástrojů"
+    "sessionToolbarHide": "Skrýt panel nástrojů",
+    "actionUpdateSiteApprovals": "Aktualizovat schválení webu"
 }

From 7853f2b096e2fa7ced4761de9f17f4dd0aa57e0e Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Thu, 16 Jul 2026 21:34:36 -0400
Subject: [PATCH 63/94] New translations en-us.json (Danish)

[ci skip]
---
 messages/da-DK.json | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/messages/da-DK.json b/messages/da-DK.json
index 2e1376264..f88ffa474 100644
--- a/messages/da-DK.json
+++ b/messages/da-DK.json
@@ -1511,6 +1511,10 @@
     "actionListInvitations": "Vis invitationer",
     "actionExportLogs": "Eksportér logs",
     "actionViewLogs": "Vis logs",
+    "actionCreateSiteProvisioningKey": "Opret provisioneringsnøgle til site",
+    "actionListSiteProvisioningKeys": "Vis provisioneringsnøgler til site",
+    "actionUpdateSiteProvisioningKey": "Opdater provisioneringsnøgle til site",
+    "actionDeleteSiteProvisioningKey": "Slet provisioneringsnøgle til site",
     "noneSelected": "Ingen valgt",
     "orgNotFound2": "Ingen organisationer fundet.",
     "search": "Søg…",
@@ -3811,5 +3815,6 @@
     "rdpUploadFailed": "Uploaden mislykkedes",
     "rdpUnicodeKeyboardMode": "Unicode tastaturtilstand",
     "sessionToolbarShow": "Vis værktøjslinje",
-    "sessionToolbarHide": "Skjul værktøjslinje"
+    "sessionToolbarHide": "Skjul værktøjslinje",
+    "actionUpdateSiteApprovals": "Opdater godkendelser på site"
 }

From 672555f05130322d31d90de2d8e3ab3e5945b213 Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Thu, 16 Jul 2026 21:34:38 -0400
Subject: [PATCH 64/94] New translations en-us.json (German)

[ci skip]
---
 messages/de-DE.json | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/messages/de-DE.json b/messages/de-DE.json
index 3ceac6dc4..615759bf1 100644
--- a/messages/de-DE.json
+++ b/messages/de-DE.json
@@ -1511,6 +1511,10 @@
     "actionListInvitations": "Einladungen auflisten",
     "actionExportLogs": "Logs exportieren",
     "actionViewLogs": "Logs anzeigen",
+    "actionCreateSiteProvisioningKey": "Bereitstellungsschlüssel für Standort erstellen",
+    "actionListSiteProvisioningKeys": "Liste der Bereitstellungsschlüssel für Standorte",
+    "actionUpdateSiteProvisioningKey": "Bereitstellungsschlüssel für Standort aktualisieren",
+    "actionDeleteSiteProvisioningKey": "Bereitstellungsschlüssel für Standort löschen",
     "noneSelected": "Keine ausgewählt",
     "orgNotFound2": "Keine Organisationen gefunden.",
     "search": "Suche…",
@@ -3811,5 +3815,6 @@
     "rdpUploadFailed": "Upload fehlgeschlagen",
     "rdpUnicodeKeyboardMode": "Unicode-Tastaturmodus",
     "sessionToolbarShow": "Werkzeugleiste zeigen",
-    "sessionToolbarHide": "Werkzeugleiste ausblenden"
+    "sessionToolbarHide": "Werkzeugleiste ausblenden",
+    "actionUpdateSiteApprovals": "Standortgenehmigungen aktualisieren"
 }

From 714e3a8fb1af9bc4505713145318cf072fda9447 Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Thu, 16 Jul 2026 21:34:40 -0400
Subject: [PATCH 65/94] New translations en-us.json (Italian)

[ci skip]
---
 messages/it-IT.json | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/messages/it-IT.json b/messages/it-IT.json
index 5edde2e2e..794eda30f 100644
--- a/messages/it-IT.json
+++ b/messages/it-IT.json
@@ -1511,6 +1511,10 @@
     "actionListInvitations": "Elenco Inviti",
     "actionExportLogs": "Esporta Log",
     "actionViewLogs": "Visualizza Log",
+    "actionCreateSiteProvisioningKey": "Crea Chiave di Provisioning del Sito",
+    "actionListSiteProvisioningKeys": "Elenca Chiavi di Provisioning del Sito",
+    "actionUpdateSiteProvisioningKey": "Aggiorna Chiave di Provisioning del Sito",
+    "actionDeleteSiteProvisioningKey": "Elimina Chiave di Provisioning del Sito",
     "noneSelected": "Nessuna selezione",
     "orgNotFound2": "Nessuna organizzazione trovata.",
     "search": "Cerca…",
@@ -3811,5 +3815,6 @@
     "rdpUploadFailed": "Caricamento fallito",
     "rdpUnicodeKeyboardMode": "Modalità tastiera Unicode",
     "sessionToolbarShow": "Mostra barra degli strumenti",
-    "sessionToolbarHide": "Nascondi barra degli strumenti"
+    "sessionToolbarHide": "Nascondi barra degli strumenti",
+    "actionUpdateSiteApprovals": "Aggiorna Approvazioni del Sito"
 }

From 5f2ee77a73a6566b7ebde44f18f1dbba04e372c1 Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Thu, 16 Jul 2026 21:34:41 -0400
Subject: [PATCH 66/94] New translations en-us.json (Korean)

[ci skip]
---
 messages/ko-KR.json | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/messages/ko-KR.json b/messages/ko-KR.json
index 67c0ee59f..8505e50e0 100644
--- a/messages/ko-KR.json
+++ b/messages/ko-KR.json
@@ -1511,6 +1511,10 @@
     "actionListInvitations": "초대 목록",
     "actionExportLogs": "로그 내보내기",
     "actionViewLogs": "로그 보기",
+    "actionCreateSiteProvisioningKey": "사이트 프로비저닝 키 생성",
+    "actionListSiteProvisioningKeys": "사이트 프로비저닝 키 목록",
+    "actionUpdateSiteProvisioningKey": "사이트 프로비저닝 키 업데이트",
+    "actionDeleteSiteProvisioningKey": "사이트 프로비저닝 키 삭제",
     "noneSelected": "선택된 항목 없음",
     "orgNotFound2": "조직이 없습니다.",
     "search": "검색…",
@@ -3811,5 +3815,6 @@
     "rdpUploadFailed": "업로드 실패",
     "rdpUnicodeKeyboardMode": "유니코드 키보드 모드",
     "sessionToolbarShow": "툴바 보기",
-    "sessionToolbarHide": "툴바 숨기기"
+    "sessionToolbarHide": "툴바 숨기기",
+    "actionUpdateSiteApprovals": "사이트 승인 업데이트"
 }

From 86670c1d6089d7806a9e196fe9f604b7e8d4c956 Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Thu, 16 Jul 2026 21:34:43 -0400
Subject: [PATCH 67/94] New translations en-us.json (Dutch)

[ci skip]
---
 messages/nl-NL.json | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/messages/nl-NL.json b/messages/nl-NL.json
index 9239cd81c..f914a3c80 100644
--- a/messages/nl-NL.json
+++ b/messages/nl-NL.json
@@ -1511,6 +1511,10 @@
     "actionListInvitations": "Toon uitnodigingen",
     "actionExportLogs": "Logboeken exporteren",
     "actionViewLogs": "Logboeken bekijken",
+    "actionCreateSiteProvisioningKey": "Een sitevoorzie-ningssleutel aanmaken",
+    "actionListSiteProvisioningKeys": "Sitevoorzie-ningssleutels weergeven",
+    "actionUpdateSiteProvisioningKey": "Sitevoorzie-ningssleutel bijwerken",
+    "actionDeleteSiteProvisioningKey": "Sitevoorzie-ningssleutel verwijderen",
     "noneSelected": "Niet geselecteerd",
     "orgNotFound2": "Geen organisaties gevonden.",
     "search": "Zoeken…",
@@ -3811,5 +3815,6 @@
     "rdpUploadFailed": "Upload mislukt",
     "rdpUnicodeKeyboardMode": "Unicode toetsenbordmodus",
     "sessionToolbarShow": "Toon werkbalk",
-    "sessionToolbarHide": "Verberg werkbalk"
+    "sessionToolbarHide": "Verberg werkbalk",
+    "actionUpdateSiteApprovals": "Sitegoedkeuringen bijwerken"
 }

From 3d9c413bbb70acc12cb3246a609889caf3edaea9 Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Thu, 16 Jul 2026 21:34:45 -0400
Subject: [PATCH 68/94] New translations en-us.json (Polish)

[ci skip]
---
 messages/pl-PL.json | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/messages/pl-PL.json b/messages/pl-PL.json
index 11df1b353..1e998dcdd 100644
--- a/messages/pl-PL.json
+++ b/messages/pl-PL.json
@@ -1511,6 +1511,10 @@
     "actionListInvitations": "Lista zaproszeń",
     "actionExportLogs": "Eksportuj dzienniki",
     "actionViewLogs": "Zobacz dzienniki",
+    "actionCreateSiteProvisioningKey": "Utwórz klucz konfiguracji strony",
+    "actionListSiteProvisioningKeys": "Lista kluczy konfiguracji strony",
+    "actionUpdateSiteProvisioningKey": "Zaktualizuj klucz konfiguracji strony",
+    "actionDeleteSiteProvisioningKey": "Usuń klucz konfiguracji strony",
     "noneSelected": "Nie wybrano",
     "orgNotFound2": "Nie znaleziono organizacji.",
     "search": "Szukaj…",
@@ -3811,5 +3815,6 @@
     "rdpUploadFailed": "Niepowodzenie przesyłania",
     "rdpUnicodeKeyboardMode": "Tryb klawiatury Unicode",
     "sessionToolbarShow": "Pokaż pasek narzędzi",
-    "sessionToolbarHide": "Ukryj pasek narzędzi"
+    "sessionToolbarHide": "Ukryj pasek narzędzi",
+    "actionUpdateSiteApprovals": "Zaktualizuj zgody na stronę"
 }

From 8e09070bc1c2383b250b5bbace3b2e22482ea2c1 Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Thu, 16 Jul 2026 21:34:46 -0400
Subject: [PATCH 69/94] New translations en-us.json (Portuguese)

[ci skip]
---
 messages/pt-PT.json | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/messages/pt-PT.json b/messages/pt-PT.json
index 4a37fb52b..9d3dd1320 100644
--- a/messages/pt-PT.json
+++ b/messages/pt-PT.json
@@ -1511,6 +1511,10 @@
     "actionListInvitations": "Listar Convites",
     "actionExportLogs": "Exportar logs",
     "actionViewLogs": "Visualizar registros",
+    "actionCreateSiteProvisioningKey": "Criar Chave de Provisionamento do Site",
+    "actionListSiteProvisioningKeys": "Listar Chaves de Provisionamento do Site",
+    "actionUpdateSiteProvisioningKey": "Atualizar Chave de Provisionamento do Site",
+    "actionDeleteSiteProvisioningKey": "Excluir Chave de Provisionamento do Site",
     "noneSelected": "Nenhum selecionado",
     "orgNotFound2": "Nenhuma organização encontrada.",
     "search": "Pesquisar…",
@@ -3811,5 +3815,6 @@
     "rdpUploadFailed": "Falha no upload",
     "rdpUnicodeKeyboardMode": "Modo de teclado Unicode",
     "sessionToolbarShow": "Mostrar barra de ferramentas",
-    "sessionToolbarHide": "Ocultar barra de ferramentas"
+    "sessionToolbarHide": "Ocultar barra de ferramentas",
+    "actionUpdateSiteApprovals": "Atualizar Aprovações do Site"
 }

From e5b9dfee661ce5b844165cb86cfe225c062ca07f Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Thu, 16 Jul 2026 21:34:48 -0400
Subject: [PATCH 70/94] New translations en-us.json (Russian)

[ci skip]
---
 messages/ru-RU.json | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/messages/ru-RU.json b/messages/ru-RU.json
index efd5bee64..287e61497 100644
--- a/messages/ru-RU.json
+++ b/messages/ru-RU.json
@@ -1511,6 +1511,10 @@
     "actionListInvitations": "Список приглашений",
     "actionExportLogs": "Экспорт журналов",
     "actionViewLogs": "Просмотр журналов",
+    "actionCreateSiteProvisioningKey": "Создать ключ конфигурации сайта",
+    "actionListSiteProvisioningKeys": "Список ключей конфигурации сайтов",
+    "actionUpdateSiteProvisioningKey": "Обновить ключ конфигурации сайта",
+    "actionDeleteSiteProvisioningKey": "Удалить ключ конфигурации сайта",
     "noneSelected": "Ничего не выбрано",
     "orgNotFound2": "Организации не найдены.",
     "search": "Поиск…",
@@ -3811,5 +3815,6 @@
     "rdpUploadFailed": "Ошибка загрузки",
     "rdpUnicodeKeyboardMode": "Режим клавиатуры Unicode",
     "sessionToolbarShow": "Показать панель инструментов",
-    "sessionToolbarHide": "Скрыть панель инструментов"
+    "sessionToolbarHide": "Скрыть панель инструментов",
+    "actionUpdateSiteApprovals": "Обновить утверждения сайта"
 }

From 50821e972d15c8711f6f0615b8df63e0fdd59654 Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Thu, 16 Jul 2026 21:34:50 -0400
Subject: [PATCH 71/94] New translations en-us.json (Turkish)

[ci skip]
---
 messages/tr-TR.json | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/messages/tr-TR.json b/messages/tr-TR.json
index 006180cc0..55f09d447 100644
--- a/messages/tr-TR.json
+++ b/messages/tr-TR.json
@@ -1511,6 +1511,10 @@
     "actionListInvitations": "Davetiyeleri Listele",
     "actionExportLogs": "Kayıtları Dışa Aktar",
     "actionViewLogs": "Kayıtları Görüntüle",
+    "actionCreateSiteProvisioningKey": "Site Sağlama Anahtarı Oluştur",
+    "actionListSiteProvisioningKeys": "Site Sağlama Anahtarlarını Listele",
+    "actionUpdateSiteProvisioningKey": "Site Sağlama Anahtarını Güncelle",
+    "actionDeleteSiteProvisioningKey": "Site Sağlama Anahtarını Sil",
     "noneSelected": "Hiçbiri seçili değil",
     "orgNotFound2": "Hiçbir organizasyon bulunamadı.",
     "search": "Ara…",
@@ -3811,5 +3815,6 @@
     "rdpUploadFailed": "Yükleme başarısız",
     "rdpUnicodeKeyboardMode": "Unicode klavye modu",
     "sessionToolbarShow": "Araç çubuğunu göster",
-    "sessionToolbarHide": "Araç çubuğunu gizle"
+    "sessionToolbarHide": "Araç çubuğunu gizle",
+    "actionUpdateSiteApprovals": "Site Onaylarını Güncelle"
 }

From aa9de4d2acde5edbe61dc8e03efe6f84115211b4 Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Thu, 16 Jul 2026 21:34:52 -0400
Subject: [PATCH 72/94] New translations en-us.json (Chinese Simplified)

[ci skip]
---
 messages/zh-CN.json | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/messages/zh-CN.json b/messages/zh-CN.json
index e5a680d99..2f9b8805c 100644
--- a/messages/zh-CN.json
+++ b/messages/zh-CN.json
@@ -1511,6 +1511,10 @@
     "actionListInvitations": "邀请列表",
     "actionExportLogs": "导出日志",
     "actionViewLogs": "查看日志",
+    "actionCreateSiteProvisioningKey": "创建站点预配密钥",
+    "actionListSiteProvisioningKeys": "列出站点预配密钥",
+    "actionUpdateSiteProvisioningKey": "更新站点预配密钥",
+    "actionDeleteSiteProvisioningKey": "删除站点预配密钥",
     "noneSelected": "未选择",
     "orgNotFound2": "未找到组织。",
     "search": "搜索…",
@@ -3811,5 +3815,6 @@
     "rdpUploadFailed": "上传失败",
     "rdpUnicodeKeyboardMode": "Unicode 键盘模式",
     "sessionToolbarShow": "显示工具栏",
-    "sessionToolbarHide": "隐藏工具栏"
+    "sessionToolbarHide": "隐藏工具栏",
+    "actionUpdateSiteApprovals": "更新站点审批"
 }

From a5808200f0840224c6fe14081767423cc5b2ae6f Mon Sep 17 00:00:00 2001
From: Owen Schwartz <owen@txv.io>
Date: Thu, 16 Jul 2026 21:34:54 -0400
Subject: [PATCH 73/94] New translations en-us.json (Norwegian Bokmal)

[ci skip]
---
 messages/nb-NO.json | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/messages/nb-NO.json b/messages/nb-NO.json
index 9bcca74db..8dd687d09 100644
--- a/messages/nb-NO.json
+++ b/messages/nb-NO.json
@@ -1511,6 +1511,10 @@
     "actionListInvitations": "Liste invitasjoner",
     "actionExportLogs": "Eksportlogger",
     "actionViewLogs": "Vis logger",
+    "actionCreateSiteProvisioningKey": "Opprett Klargjøringsnøkkel for Sted",
+    "actionListSiteProvisioningKeys": "List Klargjøringsnøkler for Sted",
+    "actionUpdateSiteProvisioningKey": "Oppdater Klargjøringsnøkkel for Sted",
+    "actionDeleteSiteProvisioningKey": "Slett Klargjøringsnøkkel for Sted",
     "noneSelected": "Ingen valgt",
     "orgNotFound2": "Ingen organisasjoner funnet.",
     "search": "Søk…",
@@ -3811,5 +3815,6 @@
     "rdpUploadFailed": "Opplastningen mislyktes",
     "rdpUnicodeKeyboardMode": "Unicode tastaturmodus",
     "sessionToolbarShow": "Vis verktøylinje",
-    "sessionToolbarHide": "Skjul verktøylinje"
+    "sessionToolbarHide": "Skjul verktøylinje",
+    "actionUpdateSiteApprovals": "Oppdater Stedsgodkjenninger"
 }

From 2d48adc9f9238c94152017156b5494245d7a7f71 Mon Sep 17 00:00:00 2001
From: miloschwartz <mschwartz10612@gmail.com>
Date: Thu, 16 Jul 2026 22:06:43 -0400
Subject: [PATCH 74/94] use proxy for logout on org auth page session expire

---
 server/routers/auth/logout.ts        | 25 ++++++++++++---------
 src/actions/server.ts                | 33 ++++++++++++++++++++++++++++
 src/components/OrgPolicyRequired.tsx | 27 +++++++++++++----------
 3 files changed, 63 insertions(+), 22 deletions(-)

diff --git a/server/routers/auth/logout.ts b/server/routers/auth/logout.ts
index b9a1431aa..b36d0c73a 100644
--- a/server/routers/auth/logout.ts
+++ b/server/routers/auth/logout.ts
@@ -16,18 +16,26 @@ export async function logout(
     next: NextFunction
 ): Promise<any> {
     const { user, session } = await verifySession(req);
+    const isSecure = req.protocol === "https";
+
+    // Always clear the session cookie so logout is idempotent, even when
+    // the session is already missing or invalid
+    res.setHeader("Set-Cookie", createBlankSessionTokenCookie(isSecure));
+
     if (!user || !session) {
         if (config.getRawConfig().app.log_failed_attempts) {
             logger.info(
-                `Log out failed because missing or invalid session. IP: ${req.ip}.`
+                `Log out with missing or invalid session. IP: ${req.ip}.`
             );
         }
-        return next(
-            createHttpError(
-                HttpCode.BAD_REQUEST,
-                "You must be logged in to sign out"
-            )
-        );
+
+        return response<null>(res, {
+            data: null,
+            success: true,
+            error: false,
+            message: "Logged out successfully",
+            status: HttpCode.OK
+        });
     }
 
     try {
@@ -37,9 +45,6 @@ export async function logout(
             logger.error("Failed to invalidate session", error);
         }
 
-        const isSecure = req.protocol === "https";
-        res.setHeader("Set-Cookie", createBlankSessionTokenCookie(isSecure));
-
         return response<null>(res, {
             data: null,
             success: true,
diff --git a/src/actions/server.ts b/src/actions/server.ts
index 2759e6213..cd75c2c57 100644
--- a/src/actions/server.ts
+++ b/src/actions/server.ts
@@ -248,6 +248,39 @@ export async function loginProxy(
     return await makeApiRequest<LoginResponse>(url, "POST", request);
 }
 
+export async function logoutProxy(): Promise<ResponseT<null>> {
+    const env = pullEnv();
+    const serverPort = process.env.SERVER_EXTERNAL_PORT;
+    const url = `http://localhost:${serverPort}/api/v1/auth/logout`;
+
+    const result = await makeApiRequest<null>(url, "POST");
+
+    try {
+        const headersList = await reqHeaders();
+        const host = headersList.get("host")?.split(":")[0];
+        const allCookies = await cookies();
+        const clearOptions = {
+            httpOnly: true,
+            secure: true,
+            sameSite: "lax" as const,
+            path: "/",
+            maxAge: 0
+        };
+        // Clear both host-only and domain-scoped variants.
+        allCookies.set(env.server.sessionCookieName, "", clearOptions);
+        if (host) {
+            allCookies.set(env.server.sessionCookieName, "", {
+                ...clearOptions,
+                domain: host
+            });
+        }
+    } catch (cookieError) {
+        console.error("Failed to clear session cookie:", cookieError);
+    }
+
+    return result;
+}
+
 export async function securityKeyStartProxy(
     request: SecurityKeyStartRequest,
     forceLogin?: boolean
diff --git a/src/components/OrgPolicyRequired.tsx b/src/components/OrgPolicyRequired.tsx
index 3765cd1bf..6d28ddbf5 100644
--- a/src/components/OrgPolicyRequired.tsx
+++ b/src/components/OrgPolicyRequired.tsx
@@ -12,8 +12,8 @@ import { Shield, ArrowRight } from "lucide-react";
 import Link from "next/link";
 import { useTranslations } from "next-intl";
 import { useRouter } from "next/navigation";
-import { createApiClient } from "@app/lib/api";
-import { useEnvContext } from "@app/hooks/useEnvContext";
+import { useState } from "react";
+import { logoutProxy } from "@app/actions/server";
 
 type OrgPolicyRequiredProps = {
     orgId: string;
@@ -40,21 +40,23 @@ export default function OrgPolicyRequired({
 }: OrgPolicyRequiredProps) {
     const t = useTranslations();
     const router = useRouter();
-
-    const api = createApiClient(useEnvContext());
+    const [loading, setLoading] = useState(false);
 
     const sessionExpired =
         policies?.maxSessionLength &&
         policies.maxSessionLength.compliant === false;
 
-    function reauthenticate() {
-        api.post("/auth/logout")
-            .catch(() => {})
-            .then(() => {
-                const destination = redirectAfterAuth ?? `/${orgId}`;
-                router.push(destination);
-                router.refresh();
-            });
+    async function reauthenticate() {
+        setLoading(true);
+        try {
+            await logoutProxy();
+        } catch (error) {
+            console.error("Error during logout:", error);
+        } finally {
+            const destination = redirectAfterAuth ?? `/${orgId}`;
+            router.push(destination);
+            router.refresh();
+        }
     }
 
     if (sessionExpired) {
@@ -76,6 +78,7 @@ export default function OrgPolicyRequired({
                         <Button
                             className="w-full"
                             onClick={reauthenticate}
+                            loading={loading}
                         >
                             {t("reauthenticate")}
                             <ArrowRight className="ml-2 h-4 w-4" />

From cb31546c6b684fb197e35442f8a45af56b31be01 Mon Sep 17 00:00:00 2001
From: miloschwartz <mschwartz10612@gmail.com>
Date: Fri, 17 Jul 2026 10:15:11 -0400
Subject: [PATCH 75/94] fix spelling in installer

---
 install/main.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/main.go b/install/main.go
index 001f09a52..13afbaca3 100644
--- a/install/main.go
+++ b/install/main.go
@@ -76,7 +76,7 @@ var redisFlag *bool
 func main() {
 
 	crowdsecFlag := flag.Bool("crowdsec", false, "Enable the CrowdSec installation prompt")
-	redisFlag = flag.Bool("redis", false, "Install Redis as cacheing solution. Required for HA. Not required for the Enterprise version.")
+	redisFlag = flag.Bool("redis", false, "Install Redis as caching solution. Required for HA. Not required for the Enterprise version.")
 	flag.Parse()
 
 	// print a banner about prerequisites - opening port 80, 443, 51820, and 21820 on the VPS and firewall and pointing your domain to the VPS IP with a records. Docs are at http://localhost:3000/Getting%20Started/dns-networking

From bb9b94a983c760583c14ffd4489cf14d3763aba4 Mon Sep 17 00:00:00 2001
From: miloschwartz <mschwartz10612@gmail.com>
Date: Fri, 17 Jul 2026 13:39:09 -0400
Subject: [PATCH 76/94] add persistent session and users to access tokens

---
 messages/en-US.json                           |  12 +-
 server/db/pg/schema/schema.ts                 |   4 +
 server/db/sqlite/schema/schema.ts             |   6 +
 server/lib/userOrg.ts                         |  10 +
 .../accessToken/generateAccessToken.ts        |  46 ++-
 .../routers/accessToken/listAccessTokens.ts   |  12 +-
 server/routers/badger/verifySession.ts        | 313 +++++++++++++++---
 server/routers/integration.ts                 |  10 -
 .../routers/resource/authWithAccessToken.ts   |  33 +-
 .../resource/createResourceSessionToken.ts    | 133 --------
 server/routers/resource/index.ts              |   1 -
 src/components/CreateShareLinkForm.tsx        | 103 +++++-
 src/components/ShareLinksTable.tsx            |  40 +++
 src/components/user-selector.tsx              | 106 ++++++
 14 files changed, 629 insertions(+), 200 deletions(-)
 delete mode 100644 server/routers/resource/createResourceSessionToken.ts
 create mode 100644 src/components/user-selector.tsx

diff --git a/messages/en-US.json b/messages/en-US.json
index 678c73ebd..bdd884d45 100644
--- a/messages/en-US.json
+++ b/messages/en-US.json
@@ -178,7 +178,7 @@
     "shareDeleteConfirm": "Confirm Delete Shareable Link",
     "shareQuestionRemove": "Are you sure you want to delete this share link?",
     "shareMessageRemove": "Once deleted, the link will no longer work and anyone using it will lose access to the resource.",
-    "shareTokenDescription": "The access token can be passed in two ways: as a query parameter or in the request headers. These must be passed from the client on every request for authenticated access.",
+    "shareTokenDescription": "The access token can be passed as a query parameter or in request headers. By default it must be sent on every request. If session persistence is enabled, the first request exchanges it for a session cookie.",
     "accessToken": "Access Token",
     "usageExamples": "Usage Examples",
     "tokenId": "Token ID",
@@ -196,8 +196,14 @@
     "shareTitleOptional": "Title (optional)",
     "sharePathOptional": "Path (optional)",
     "sharePathDescription": "The link will redirect users to this path after authentication.",
+    "shareAssociateUserOptional": "Associate User (optional)",
+    "shareAssociateUserDescription": "When set, requests using this link are attributed to the user in access logs and identity headers. The link is removed if the user leaves the organization.",
+    "userSelect": "Select user",
+    "usersNotFound": "No users found",
     "expireIn": "Expire In",
     "neverExpire": "Never expire",
+    "sharePersistSession": "Persist session after first use",
+    "sharePersistSessionDescription": "When enabled, the first request with this token sets a session cookie so later requests do not need the token. Leave off for API clients that should send the token on every request.",
     "shareExpireDescription": "Expiration time is how long the link will be usable and provide access to the resource. After this time, the link will no longer work, and users who used this link will lose access to the resource.",
     "shareSeeOnce": "You will only be able to see this link once. Make sure to copy it.",
     "shareAccessHint": "Anyone with this link can access the resource. Share it with care.",
@@ -3089,8 +3095,8 @@
     "sourceAddress": "Source Address",
     "destinationAddress": "Destination Address",
     "duration": "Duration",
-    "licenseRequiredToUse": "An <enterpriseLicenseLink>Enterprise Edition</enterpriseLicenseLink> license or <pangolinCloudLink>Pangolin Cloud</pangolinCloudLink> is required to use this feature. <bookADemoLink>Book a free demo or POC trial to learn more</bookADemoLink>.",
-    "ossEnterpriseEditionRequired": "The <enterpriseEditionLink>Enterprise Edition</enterpriseEditionLink> is required to use this feature. This feature is also available in <pangolinCloudLink>Pangolin Cloud</pangolinCloudLink>. <bookADemoLink>Book a free demo or POC trial to learn more</bookADemoLink>.",
+    "licenseRequiredToUse": "An <enterpriseLicenseLink>Enterprise Edition</enterpriseLicenseLink> license or <pangolinCloudLink>Pangolin Cloud</pangolinCloudLink> is required to use this feature. <bookADemoLink>Book a free demo or POC trial to learn more.</bookADemoLink>",
+    "ossEnterpriseEditionRequired": "The <enterpriseEditionLink>Enterprise Edition</enterpriseEditionLink> is required to use this feature. This feature is also available in <pangolinCloudLink>Pangolin Cloud</pangolinCloudLink>. <bookADemoLink>Book a free demo or POC trial to learn more.</bookADemoLink>",
     "certResolver": "Certificate Resolver",
     "certResolverDescription": "Select the certificate resolver to use for this resource.",
     "selectCertResolver": "Select Certificate Resolver",
diff --git a/server/db/pg/schema/schema.ts b/server/db/pg/schema/schema.ts
index f3375b0d9..7bb1767bd 100644
--- a/server/db/pg/schema/schema.ts
+++ b/server/db/pg/schema/schema.ts
@@ -905,12 +905,16 @@ export const resourceAccessToken = pgTable("resourceAccessToken", {
     resourceId: integer("resourceId")
         .notNull()
         .references(() => resources.resourceId, { onDelete: "cascade" }),
+    userId: varchar("userId").references(() => users.userId, {
+        onDelete: "cascade"
+    }),
     path: varchar("path"),
     tokenHash: varchar("tokenHash").notNull(),
     sessionLength: bigint("sessionLength", { mode: "number" }).notNull(),
     expiresAt: bigint("expiresAt", { mode: "number" }),
     title: varchar("title"),
     description: varchar("description"),
+    persistSession: boolean("persistSession").notNull().default(false),
     createdAt: bigint("createdAt", { mode: "number" }).notNull()
 });
 
diff --git a/server/db/sqlite/schema/schema.ts b/server/db/sqlite/schema/schema.ts
index 3fcf38a41..48f038880 100644
--- a/server/db/sqlite/schema/schema.ts
+++ b/server/db/sqlite/schema/schema.ts
@@ -1125,12 +1125,18 @@ export const resourceAccessToken = sqliteTable("resourceAccessToken", {
     resourceId: integer("resourceId")
         .notNull()
         .references(() => resources.resourceId, { onDelete: "cascade" }),
+    userId: text("userId").references(() => users.userId, {
+        onDelete: "cascade"
+    }),
     path: text("path"),
     tokenHash: text("tokenHash").notNull(),
     sessionLength: integer("sessionLength").notNull(),
     expiresAt: integer("expiresAt"),
     title: text("title"),
     description: text("description"),
+    persistSession: integer("persistSession", { mode: "boolean" })
+        .notNull()
+        .default(false),
     createdAt: integer("createdAt").notNull()
 });
 
diff --git a/server/lib/userOrg.ts b/server/lib/userOrg.ts
index 4bff40c13..ea086d0c0 100644
--- a/server/lib/userOrg.ts
+++ b/server/lib/userOrg.ts
@@ -2,6 +2,7 @@ import {
     db,
     Org,
     orgs,
+    resourceAccessToken,
     resources,
     siteResources,
     sites,
@@ -83,6 +84,15 @@ export async function removeUserFromOrg(
         .delete(userOrgs)
         .where(and(eq(userOrgs.userId, userId), eq(userOrgs.orgId, org.orgId)));
 
+    await trx
+        .delete(resourceAccessToken)
+        .where(
+            and(
+                eq(resourceAccessToken.userId, userId),
+                eq(resourceAccessToken.orgId, org.orgId)
+            )
+        );
+
     await trx.delete(userResources).where(
         and(
             eq(userResources.userId, userId),
diff --git a/server/routers/accessToken/generateAccessToken.ts b/server/routers/accessToken/generateAccessToken.ts
index a06068c01..5b259af70 100644
--- a/server/routers/accessToken/generateAccessToken.ts
+++ b/server/routers/accessToken/generateAccessToken.ts
@@ -1,4 +1,3 @@
-import { hash } from "@node-rs/argon2";
 import {
     generateId,
     generateIdFromEntropySize,
@@ -8,18 +7,18 @@ import { db } from "@server/db";
 import {
     ResourceAccessToken,
     resourceAccessToken,
-    resources
+    resources,
+    userOrgs
 } from "@server/db";
 import HttpCode from "@server/types/HttpCode";
 import response from "@server/lib/response";
-import { eq } from "drizzle-orm";
+import { and, eq } from "drizzle-orm";
 import { NextFunction, Request, Response } from "express";
 import createHttpError from "http-errors";
 import { z } from "zod";
 import { fromError } from "zod-validation-error";
 import logger from "@server/logger";
 import { createDate, TimeSpan } from "oslo";
-import { hashPassword } from "@server/auth/password";
 import { encodeHexLowerCase } from "@oslojs/encoding";
 import { sha256 } from "@oslojs/crypto/sha2";
 import { OpenAPITags, registry } from "@server/openApi";
@@ -28,7 +27,9 @@ export const generateAccessTokenBodySchema = z.strictObject({
     validForSeconds: z.int().positive().optional(), // seconds
     title: z.string().optional(),
     path: z.string().optional(),
-    description: z.string().optional()
+    description: z.string().optional(),
+    persistSession: z.boolean().optional().default(false),
+    userId: z.string().optional()
 });
 
 export const generateAccssTokenParamsSchema = z.strictObject({
@@ -101,7 +102,14 @@ export async function generateAccessToken(
     }
 
     const { resourceId } = parsedParams.data;
-    const { validForSeconds, title, path, description } = parsedBody.data;
+    const {
+        validForSeconds,
+        title,
+        path,
+        description,
+        persistSession,
+        userId
+    } = parsedBody.data;
 
     const [resource] = await db
         .select()
@@ -112,6 +120,28 @@ export async function generateAccessToken(
         return next(createHttpError(HttpCode.NOT_FOUND, "Resource not found"));
     }
 
+    if (userId) {
+        const [membership] = await db
+            .select()
+            .from(userOrgs)
+            .where(
+                and(
+                    eq(userOrgs.userId, userId),
+                    eq(userOrgs.orgId, resource.orgId)
+                )
+            )
+            .limit(1);
+
+        if (!membership) {
+            return next(
+                createHttpError(
+                    HttpCode.BAD_REQUEST,
+                    "User is not a member of this organization"
+                )
+            );
+        }
+    }
+
     try {
         const sessionLength = validForSeconds
             ? validForSeconds * 1000
@@ -133,23 +163,27 @@ export async function generateAccessToken(
                 accessTokenId: id,
                 orgId: resource.orgId,
                 resourceId,
+                userId: userId || null,
                 tokenHash,
                 expiresAt: expiresAt || null,
                 sessionLength: sessionLength,
                 title: title || null,
                 path: path || null,
                 description: description || null,
+                persistSession,
                 createdAt: new Date().getTime()
             })
             .returning({
                 accessTokenId: resourceAccessToken.accessTokenId,
                 orgId: resourceAccessToken.orgId,
                 resourceId: resourceAccessToken.resourceId,
+                userId: resourceAccessToken.userId,
                 expiresAt: resourceAccessToken.expiresAt,
                 sessionLength: resourceAccessToken.sessionLength,
                 title: resourceAccessToken.title,
                 path: resourceAccessToken.path,
                 description: resourceAccessToken.description,
+                persistSession: resourceAccessToken.persistSession,
                 createdAt: resourceAccessToken.createdAt
             })
             .execute();
diff --git a/server/routers/accessToken/listAccessTokens.ts b/server/routers/accessToken/listAccessTokens.ts
index 472d9da40..a5ec3b540 100644
--- a/server/routers/accessToken/listAccessTokens.ts
+++ b/server/routers/accessToken/listAccessTokens.ts
@@ -6,12 +6,13 @@ import {
     userResources,
     roleResources,
     resourceAccessToken,
-    sites
+    sites,
+    users
 } from "@server/db";
 import response from "@server/lib/response";
 import HttpCode from "@server/types/HttpCode";
 import createHttpError from "http-errors";
-import { sql, eq, or, inArray, and, count, isNull, lt, gt } from "drizzle-orm";
+import { sql, eq, or, inArray, and, count, isNull, gt } from "drizzle-orm";
 import logger from "@server/logger";
 import stoi from "@server/lib/stoi";
 import { fromZodError } from "zod-validation-error";
@@ -55,11 +56,16 @@ function queryAccessTokens(
         accessTokenId: resourceAccessToken.accessTokenId,
         orgId: resourceAccessToken.orgId,
         resourceId: resourceAccessToken.resourceId,
+        userId: resourceAccessToken.userId,
+        userName: users.name,
+        username: users.username,
+        userEmail: users.email,
         sessionLength: resourceAccessToken.sessionLength,
         expiresAt: resourceAccessToken.expiresAt,
         tokenHash: resourceAccessToken.tokenHash,
         title: resourceAccessToken.title,
         description: resourceAccessToken.description,
+        persistSession: resourceAccessToken.persistSession,
         createdAt: resourceAccessToken.createdAt,
         resourceName: resources.name,
         resourceNiceId: resources.niceId,
@@ -75,6 +81,7 @@ function queryAccessTokens(
                 eq(resourceAccessToken.resourceId, resources.resourceId)
             )
             .leftJoin(sites, eq(resources.resourceId, sites.siteId))
+            .leftJoin(users, eq(resourceAccessToken.userId, users.userId))
             .where(
                 and(
                     inArray(
@@ -97,6 +104,7 @@ function queryAccessTokens(
                 eq(resourceAccessToken.resourceId, resources.resourceId)
             )
             .leftJoin(sites, eq(resources.resourceId, sites.siteId))
+            .leftJoin(users, eq(resourceAccessToken.userId, users.userId))
             .where(
                 and(
                     inArray(
diff --git a/server/routers/badger/verifySession.ts b/server/routers/badger/verifySession.ts
index cf36fef72..901c881f2 100644
--- a/server/routers/badger/verifySession.ts
+++ b/server/routers/badger/verifySession.ts
@@ -1,4 +1,9 @@
-import { validateResourceSessionToken } from "@server/auth/sessions/resource";
+import {
+    createResourceSession,
+    serializeResourceSessionCookie,
+    validateResourceSessionToken
+} from "@server/auth/sessions/resource";
+import { generateSessionToken } from "@server/auth/sessions/app";
 import { verifyResourceAccessToken } from "@server/auth/verifyResourceAccessToken";
 import {
     getResourceByDomain,
@@ -13,6 +18,7 @@ import {
     LoginPage,
     Org,
     Resource,
+    ResourceAccessToken,
     ResourceHeaderAuth,
     ResourceHeaderAuthExtendedCompatibility,
     ResourcePassword,
@@ -21,7 +27,10 @@ import {
     ResourcePolicyPassword,
     ResourcePolicyHeaderAuth,
     ResourceRule,
-    ResourceSession
+    ResourceSession,
+    db,
+    resourceAccessToken,
+    users
 } from "@server/db";
 import config from "@server/lib/config";
 import { isIpInCidr, stripPortFromHost } from "@server/lib/ip";
@@ -41,11 +50,13 @@ import {
     enforceResourceSessionLength
 } from "#dynamic/lib/checkOrgAccessPolicy";
 import { logRequestAudit } from "./logRequestAudit";
+import { logAccessAudit } from "#dynamic/lib/logAccessAudit";
 import { REGIONS } from "@server/db/regions";
 import { localCache } from "#dynamic/lib/cache";
 import { APP_VERSION } from "@server/lib/consts";
 import { isSubscribed } from "#dynamic/lib/isSubscribed";
 import { tierMatrix } from "@server/lib/billing/tierMatrix";
+import { eq } from "drizzle-orm";
 
 const verifyResourceSessionSchema = z.object({
     sessions: z.record(z.string(), z.string()).optional(),
@@ -350,22 +361,15 @@ export async function verifyResourceSession(
             }
 
             if (valid && tokenItem) {
-                logRequestAudit(
-                    {
-                        action: true,
-                        reason: 102, // valid access token
-                        resourceId: resource.resourceId,
-                        orgId: resource.orgId,
-                        location: ipCC,
-                        apiKey: {
-                            name: tokenItem.title,
-                            apiKeyId: tokenItem.accessTokenId
-                        }
-                    },
-                    parsedBody.data
+                return await allowAccessToken(
+                    res,
+                    resource,
+                    tokenItem,
+                    sessions,
+                    dontStripSession,
+                    parsedBody.data,
+                    ipCC
                 );
-
-                return allowed(res, undefined, dontStripSession);
             }
         }
 
@@ -401,22 +405,15 @@ export async function verifyResourceSession(
             }
 
             if (valid && tokenItem) {
-                logRequestAudit(
-                    {
-                        action: true,
-                        reason: 102, // valid access token
-                        resourceId: resource.resourceId,
-                        orgId: resource.orgId,
-                        location: ipCC,
-                        apiKey: {
-                            name: tokenItem.title,
-                            apiKeyId: tokenItem.accessTokenId
-                        }
-                    },
-                    parsedBody.data
+                return await allowAccessToken(
+                    res,
+                    resource,
+                    tokenItem,
+                    sessions,
+                    dontStripSession,
+                    parsedBody.data,
+                    ipCC
                 );
-
-                return allowed(res, undefined, dontStripSession);
             }
         }
 
@@ -666,22 +663,37 @@ export async function verifyResourceSession(
                         "Resource allowed because access token session is valid"
                     );
 
-                    logRequestAudit(
+                    const [tokenItem] = await db
+                        .select()
+                        .from(resourceAccessToken)
+                        .where(
+                            eq(
+                                resourceAccessToken.accessTokenId,
+                                resourceSession.accessTokenId
+                            )
+                        )
+                        .limit(1);
+
+                    const userData = tokenItem
+                        ? await getAccessTokenUserData(
+                              tokenItem,
+                              resource.orgId
+                          )
+                        : undefined;
+
+                    logAccessTokenRequestAudit(
                         {
-                            action: true,
-                            reason: 102, // valid access token
                             resourceId: resource.resourceId,
                             orgId: resource.orgId,
                             location: ipCC,
-                            apiKey: {
-                                name: null,
-                                apiKeyId: resourceSession.accessTokenId
-                            }
+                            accessTokenId: resourceSession.accessTokenId,
+                            tokenTitle: tokenItem?.title ?? null,
+                            userData
                         },
                         parsedBody.data
                     );
 
-                    return allowed(res, undefined, dontStripSession);
+                    return allowed(res, userData, dontStripSession);
                 }
 
                 if (resourceSession.userSessionId && sso) {
@@ -892,6 +904,227 @@ function allowed(
     return response<VerifyUserResponse>(res, data);
 }
 
+async function allowAccessToken(
+    res: Response,
+    resource: Resource,
+    tokenItem: ResourceAccessToken,
+    sessions: Record<string, string> | undefined,
+    dontStripSession: boolean | undefined,
+    auditBody: VerifyResourceSessionSchema,
+    location?: string
+) {
+    const userData = await getAccessTokenUserData(tokenItem, resource.orgId);
+
+    logAccessTokenRequestAudit(
+        {
+            resourceId: resource.resourceId,
+            orgId: resource.orgId,
+            location,
+            accessTokenId: tokenItem.accessTokenId,
+            tokenTitle: tokenItem.title,
+            userData
+        },
+        auditBody
+    );
+
+    if (!tokenItem.persistSession) {
+        logAccessTokenAccessAudit(tokenItem, resource, userData, auditBody);
+        return allowed(res, userData, dontStripSession);
+    }
+
+    const resourceSessionToken = extractResourceSessionToken(
+        sessions ?? {},
+        resource.ssl
+    );
+
+    if (resourceSessionToken) {
+        const sessionCacheKey = `session:${resourceSessionToken}`;
+        let resourceSession: ResourceSession | null | undefined =
+            localCache.get(sessionCacheKey);
+
+        if (!resourceSession) {
+            const result = await validateResourceSessionToken(
+                resourceSessionToken,
+                resource.resourceId
+            );
+            resourceSession = result?.resourceSession;
+            localCache.set(sessionCacheKey, resourceSession, 5);
+        }
+
+        if (
+            resourceSession &&
+            !resourceSession.isRequestToken &&
+            resourceSession.accessTokenId === tokenItem.accessTokenId
+        ) {
+            logger.debug(
+                "Resource allowed because existing access token session is valid"
+            );
+            return allowed(res, userData, dontStripSession);
+        }
+    }
+
+    logAccessTokenAccessAudit(tokenItem, resource, userData, auditBody);
+    return await createAccessTokenSession(res, resource, tokenItem, userData);
+}
+
+async function createAccessTokenSession(
+    res: Response,
+    resource: Resource,
+    tokenItem: ResourceAccessToken,
+    userData?: BasicUserData
+) {
+    const token = generateSessionToken();
+    const sess = await createResourceSession({
+        resourceId: resource.resourceId,
+        token,
+        accessTokenId: tokenItem.accessTokenId,
+        sessionLength: tokenItem.sessionLength,
+        expiresAt: tokenItem.expiresAt,
+        doNotExtend: tokenItem.expiresAt ? true : false
+    });
+    const cookieName = config.getRawConfig().server.session_cookie_name;
+    const cookie = serializeResourceSessionCookie(
+        cookieName,
+        resource.fullDomain!,
+        token,
+        !resource.ssl,
+        new Date(sess.expiresAt)
+    );
+    res.appendHeader("Set-Cookie", cookie);
+    logger.debug("Access token is valid, creating new session");
+    return allowed(res, userData);
+}
+
+async function getAccessTokenUserData(
+    tokenItem: ResourceAccessToken,
+    orgId: string
+): Promise<BasicUserData | undefined> {
+    if (!tokenItem.userId) {
+        return undefined;
+    }
+
+    const cacheKey = `accessTokenUser:${tokenItem.userId}:${orgId}`;
+    const cached = localCache.get(cacheKey) as BasicUserData | null | undefined;
+    if (cached !== undefined) {
+        return cached ?? undefined;
+    }
+
+    const [user] = await db
+        .select()
+        .from(users)
+        .where(eq(users.userId, tokenItem.userId))
+        .limit(1);
+
+    if (!user) {
+        localCache.set(cacheKey, null, 5);
+        return undefined;
+    }
+
+    const userOrgRoles = await getUserOrgRoles(user.userId, orgId);
+    const userData: BasicUserData = {
+        userId: user.userId,
+        username: user.username,
+        email: user.email,
+        name: user.name,
+        role: userOrgRoles.map((r) => r.roleName).join(", ") || null
+    };
+
+    localCache.set(cacheKey, userData, 12);
+    return userData;
+}
+
+function logAccessTokenRequestAudit(
+    data: {
+        resourceId: number;
+        orgId: string;
+        location?: string;
+        accessTokenId: string;
+        tokenTitle: string | null;
+        userData?: BasicUserData;
+    },
+    body: VerifyResourceSessionSchema
+) {
+    if (data.userData) {
+        logRequestAudit(
+            {
+                action: true,
+                reason: 102, // valid access token
+                resourceId: data.resourceId,
+                orgId: data.orgId,
+                location: data.location,
+                user: {
+                    username: data.userData.username,
+                    userId: data.userData.userId
+                },
+                metadata: {
+                    accessTokenId: data.accessTokenId,
+                    accessTokenTitle: data.tokenTitle
+                }
+            },
+            body
+        );
+        return;
+    }
+
+    logRequestAudit(
+        {
+            action: true,
+            reason: 102, // valid access token
+            resourceId: data.resourceId,
+            orgId: data.orgId,
+            location: data.location,
+            apiKey: {
+                name: data.tokenTitle,
+                apiKeyId: data.accessTokenId
+            }
+        },
+        body
+    );
+}
+
+function logAccessTokenAccessAudit(
+    tokenItem: ResourceAccessToken,
+    resource: Resource,
+    userData: BasicUserData | undefined,
+    body: VerifyResourceSessionSchema
+) {
+    const userAgent =
+        body.headers?.["user-agent"] || body.headers?.["User-Agent"];
+
+    if (userData) {
+        logAccessAudit({
+            orgId: resource.orgId,
+            resourceId: resource.resourceId,
+            action: true,
+            type: "accessToken",
+            user: {
+                username: userData.username,
+                userId: userData.userId
+            },
+            metadata: {
+                accessTokenId: tokenItem.accessTokenId,
+                accessTokenTitle: tokenItem.title
+            },
+            userAgent,
+            requestIp: body.requestIp
+        });
+        return;
+    }
+
+    logAccessAudit({
+        orgId: resource.orgId,
+        resourceId: resource.resourceId,
+        action: true,
+        type: "accessToken",
+        apiKey: {
+            name: tokenItem.title,
+            apiKeyId: tokenItem.accessTokenId
+        },
+        userAgent,
+        requestIp: body.requestIp
+    });
+}
+
 async function headerAuthChallenged(
     res: Response,
     redirectPath?: string,
diff --git a/server/routers/integration.ts b/server/routers/integration.ts
index 3abd664eb..567c3060e 100644
--- a/server/routers/integration.ts
+++ b/server/routers/integration.ts
@@ -809,16 +809,6 @@ authenticated.post(
     accessToken.generateAccessToken
 );
 
-authenticated.post(
-    `/resource/:resourceId/session-token`,
-    verifyApiKeyResourceAccess,
-    verifyApiKeyUserAccess,
-    verifyLimits,
-    verifyApiKeyHasAction(ActionsEnum.createResourceSessionToken),
-    logActionAudit(ActionsEnum.createResourceSessionToken),
-    resource.createResourceSessionToken
-);
-
 authenticated.delete(
     `/access-token/:accessTokenId`,
     verifyApiKeyAccessTokenAccess,
diff --git a/server/routers/resource/authWithAccessToken.ts b/server/routers/resource/authWithAccessToken.ts
index 195dbafe2..2e625b6a0 100644
--- a/server/routers/resource/authWithAccessToken.ts
+++ b/server/routers/resource/authWithAccessToken.ts
@@ -1,6 +1,6 @@
 import { generateSessionToken } from "@server/auth/sessions/app";
 import { db } from "@server/db";
-import { Resource, resources } from "@server/db";
+import { Resource, resources, users } from "@server/db";
 import HttpCode from "@server/types/HttpCode";
 import response from "@server/lib/response";
 import { eq } from "drizzle-orm";
@@ -156,11 +156,42 @@ export async function authWithAccessToken(
             doNotExtend: true
         });
 
+        let accessAuditUser: { username: string; userId: string } | undefined;
+        if (tokenItem.userId) {
+            const [associatedUser] = await db
+                .select({
+                    userId: users.userId,
+                    username: users.username
+                })
+                .from(users)
+                .where(eq(users.userId, tokenItem.userId))
+                .limit(1);
+            if (associatedUser) {
+                accessAuditUser = {
+                    userId: associatedUser.userId,
+                    username: associatedUser.username
+                };
+            }
+        }
+
         logAccessAudit({
             orgId: resource.orgId,
             resourceId: resource.resourceId,
             action: true,
             type: "accessToken",
+            apiKey: accessAuditUser
+                ? undefined
+                : {
+                      name: tokenItem.title,
+                      apiKeyId: tokenItem.accessTokenId
+                  },
+            user: accessAuditUser,
+            metadata: accessAuditUser
+                ? {
+                      accessTokenId: tokenItem.accessTokenId,
+                      accessTokenTitle: tokenItem.title
+                  }
+                : undefined,
             userAgent: req.headers["user-agent"],
             requestIp: req.ip
         });
diff --git a/server/routers/resource/createResourceSessionToken.ts b/server/routers/resource/createResourceSessionToken.ts
deleted file mode 100644
index 82f0d0cbf..000000000
--- a/server/routers/resource/createResourceSessionToken.ts
+++ /dev/null
@@ -1,133 +0,0 @@
-import { Request, Response, NextFunction } from "express";
-import { z } from "zod";
-import { db } from "@server/db";
-import { resources, users, userOrgs } from "@server/db";
-import { eq, and } from "drizzle-orm";
-import { createResourceSession } from "@server/auth/sessions/resource";
-import HttpCode from "@server/types/HttpCode";
-import createHttpError from "http-errors";
-import { fromError } from "zod-validation-error";
-import logger from "@server/logger";
-import { createSession, generateSessionToken } from "@server/auth/sessions/app";
-import { response } from "@server/lib/response";
-
-const createResourceSessionTokenParams = z.strictObject({
-    resourceId: z.coerce.number().int().positive()
-});
-
-const createResourceSessionTokenBody = z.strictObject({
-    userId: z.string().nonempty(),
-    idpId: z.coerce.number().int().positive().optional()
-});
-
-export type CreateResourceSessionTokenResponse = {
-    requestToken: string;
-};
-
-export async function createResourceSessionToken(
-    req: Request,
-    res: Response,
-    next: NextFunction
-): Promise<any> {
-    try {
-        const parsedParams = createResourceSessionTokenParams.safeParse(
-            req.params
-        );
-        if (!parsedParams.success) {
-            return next(
-                createHttpError(
-                    HttpCode.BAD_REQUEST,
-                    fromError(parsedParams.error).toString()
-                )
-            );
-        }
-
-        const parsedBody = createResourceSessionTokenBody.safeParse(req.body);
-        if (!parsedBody.success) {
-            return next(
-                createHttpError(
-                    HttpCode.BAD_REQUEST,
-                    fromError(parsedBody.error).toString()
-                )
-            );
-        }
-
-        const { resourceId } = parsedParams.data;
-        const { userId, idpId } = parsedBody.data;
-
-        const [resource] = await db
-            .select()
-            .from(resources)
-            .where(eq(resources.resourceId, resourceId))
-            .limit(1);
-
-        if (!resource) {
-            return next(
-                createHttpError(
-                    HttpCode.NOT_FOUND,
-                    `Resource with ID ${resourceId} not found`
-                )
-            );
-        }
-
-        const candidates = await db
-            .select({ userId: users.userId })
-            .from(userOrgs)
-            .innerJoin(users, eq(userOrgs.userId, users.userId))
-            .where(
-                and(
-                    eq(users.userId, userId),
-                    eq(userOrgs.orgId, resource.orgId)
-                )
-            );
-
-        if (candidates.length === 0) {
-            return next(
-                createHttpError(
-                    HttpCode.NOT_FOUND,
-                    `User not found in the organization that owns this resource`
-                )
-            );
-        }
-
-        if (candidates.length > 1) {
-            return next(
-                createHttpError(
-                    HttpCode.BAD_REQUEST,
-                    "Multiple users match this username (external users from different identity providers). Specify idpId to disambiguate."
-                )
-            );
-        }
-
-        const targetUserId = candidates[0].userId;
-
-        const appSessionToken = generateSessionToken();
-        const appSession = await createSession(appSessionToken, targetUserId);
-
-        const requestToken = generateSessionToken();
-        await createResourceSession({
-            resourceId,
-            token: requestToken,
-            userSessionId: appSession.sessionId,
-            isRequestToken: true,
-            expiresAt: Date.now() + 1000 * 30, // 30 seconds
-            sessionLength: 1000 * 30,
-            doNotExtend: true
-        });
-
-        logger.debug("Resource session token created successfully");
-
-        return response<CreateResourceSessionTokenResponse>(res, {
-            data: { requestToken },
-            success: true,
-            error: false,
-            message: "Resource session token created successfully",
-            status: HttpCode.OK
-        });
-    } catch (error) {
-        logger.error(error);
-        return next(
-            createHttpError(HttpCode.INTERNAL_SERVER_ERROR, "An error occurred")
-        );
-    }
-}
diff --git a/server/routers/resource/index.ts b/server/routers/resource/index.ts
index 4bc9d20f0..83dbdea2a 100644
--- a/server/routers/resource/index.ts
+++ b/server/routers/resource/index.ts
@@ -17,7 +17,6 @@ export * from "./getResourceWhitelist";
 export * from "./authWithWhitelist";
 export * from "./authWithAccessToken";
 export * from "./getExchangeToken";
-export * from "./createResourceSessionToken";
 export * from "./createResourceRule";
 export * from "./deleteResourceRule";
 export * from "./listResourceRules";
diff --git a/src/components/CreateShareLinkForm.tsx b/src/components/CreateShareLinkForm.tsx
index 95884b486..e6bdc60b0 100644
--- a/src/components/CreateShareLinkForm.tsx
+++ b/src/components/CreateShareLinkForm.tsx
@@ -52,7 +52,6 @@ import { ChevronsUpDown } from "lucide-react";
 import { Checkbox } from "@app/components/ui/checkbox";
 import { GenerateAccessTokenResponse } from "@server/routers/accessToken";
 import { constructShareLink } from "@app/lib/shareLinks";
-import { ShareLinkRow } from "@app/components/ShareLinksTable";
 import { QRCodeCanvas, QRCodeSVG } from "qrcode.react";
 import {
     Collapsible,
@@ -63,11 +62,26 @@ import AccessTokenSection from "@app/components/AccessTokenUsage";
 import { useTranslations } from "next-intl";
 import { toUnicode } from "punycode";
 import { ResourceSelector, type SelectedResource } from "./resource-selector";
+import { UserSelector, type SelectedUser } from "@app/components/user-selector";
+
+type CreatedShareLink = {
+    accessTokenId: string;
+    resourceId: number;
+    resourceName: string;
+    resourceNiceId: string;
+    title: string | null;
+    createdAt: number;
+    expiresAt: number | null;
+    userId?: string | null;
+    userName?: string | null;
+    username?: string | null;
+    userEmail?: string | null;
+};
 
 type FormProps = {
     open: boolean;
     setOpen: (open: boolean) => void;
-    onCreated?: (result: ShareLinkRow) => void;
+    onCreated?: (result: CreatedShareLink) => void;
 };
 
 export default function CreateShareLinkForm({
@@ -85,6 +99,8 @@ export default function CreateShareLinkForm({
     const [accessToken, setAccessToken] = useState<string | null>(null);
     const [loading, setLoading] = useState(false);
     const [neverExpire, setNeverExpire] = useState(false);
+    const [persistSession, setPersistSession] = useState(false);
+    const [selectedUser, setSelectedUser] = useState<SelectedUser | null>(null);
 
     const [isOpen, setIsOpen] = useState(false);
     const t = useTranslations();
@@ -175,7 +191,9 @@ export default function CreateShareLinkForm({
                                 values.resourceName ||
                                 "Resource" + values.resourceId
                         }),
-                    path: values.path
+                    path: values.path,
+                    persistSession,
+                    userId: selectedUser?.id
                 }
             )
             .catch((e) => {
@@ -205,7 +223,11 @@ export default function CreateShareLinkForm({
                 resourceNiceId: selectedResource ? selectedResource.niceId : "",
                 title: token.title,
                 createdAt: token.createdAt,
-                expiresAt: token.expiresAt
+                expiresAt: token.expiresAt,
+                userId: token.userId,
+                userName: selectedUser?.text ?? null,
+                username: null,
+                userEmail: null
             });
         }
 
@@ -220,6 +242,9 @@ export default function CreateShareLinkForm({
                     setOpen(val);
                     setLink(null);
                     setLoading(false);
+                    setNeverExpire(false);
+                    setPersistSession(false);
+                    setSelectedUser(null);
                     form.reset();
                 }}
             >
@@ -344,6 +369,48 @@ export default function CreateShareLinkForm({
                                             )}
                                         />
 
+                                        <div className="space-y-2">
+                                            <FormLabel>
+                                                {t(
+                                                    "shareAssociateUserOptional"
+                                                )}
+                                            </FormLabel>
+                                            <Popover>
+                                                <PopoverTrigger asChild>
+                                                    <Button
+                                                        variant="outline"
+                                                        role="combobox"
+                                                        className={cn(
+                                                            "w-full justify-between",
+                                                            !selectedUser &&
+                                                                "text-muted-foreground"
+                                                        )}
+                                                    >
+                                                        {selectedUser?.text
+                                                            ? selectedUser.text
+                                                            : t("userSelect")}
+                                                        <CaretSortIcon className="ml-2 h-4 w-4 shrink-0 opacity-50" />
+                                                    </Button>
+                                                </PopoverTrigger>
+                                                <PopoverContent className="p-0 w-[var(--radix-popover-trigger-width)]">
+                                                    <UserSelector
+                                                        orgId={org.org.orgId}
+                                                        selectedUser={
+                                                            selectedUser
+                                                        }
+                                                        onSelectUser={
+                                                            setSelectedUser
+                                                        }
+                                                    />
+                                                </PopoverContent>
+                                            </Popover>
+                                            <p className="text-sm text-muted-foreground">
+                                                {t(
+                                                    "shareAssociateUserDescription"
+                                                )}
+                                            </p>
+                                        </div>
+
                                         <div className="space-y-4">
                                             <div className="space-y-2">
                                                 <FormLabel>
@@ -437,6 +504,34 @@ export default function CreateShareLinkForm({
                                                 </label>
                                             </div>
 
+                                            <div className="flex items-start space-x-2">
+                                                <Checkbox
+                                                    id="persist-session"
+                                                    checked={persistSession}
+                                                    onCheckedChange={(val) =>
+                                                        setPersistSession(
+                                                            val as boolean
+                                                        )
+                                                    }
+                                                    className="mt-0.5"
+                                                />
+                                                <div className="space-y-1">
+                                                    <label
+                                                        htmlFor="persist-session"
+                                                        className="text-sm font-medium leading-none peer-disabled:cursor-not-allowed peer-disabled:opacity-70"
+                                                    >
+                                                        {t(
+                                                            "sharePersistSession"
+                                                        )}
+                                                    </label>
+                                                    <p className="text-sm text-muted-foreground">
+                                                        {t(
+                                                            "sharePersistSessionDescription"
+                                                        )}
+                                                    </p>
+                                                </div>
+                                            </div>
+
                                             <p className="text-sm text-muted-foreground">
                                                 {t("shareExpireDescription")}
                                             </p>
diff --git a/src/components/ShareLinksTable.tsx b/src/components/ShareLinksTable.tsx
index 8394edf89..b4df1966f 100644
--- a/src/components/ShareLinksTable.tsx
+++ b/src/components/ShareLinksTable.tsx
@@ -35,6 +35,7 @@ import moment from "moment";
 import CreateShareLinkForm from "@app/components/CreateShareLinkForm";
 import { constructShareLink } from "@app/lib/shareLinks";
 import { useTranslations } from "next-intl";
+import { getUserDisplayName } from "@app/lib/getUserDisplayName";
 
 export type ShareLinkRow = {
     accessTokenId: string;
@@ -44,6 +45,10 @@ export type ShareLinkRow = {
     title: string | null;
     createdAt: number;
     expiresAt: number | null;
+    userId?: string | null;
+    userName?: string | null;
+    username?: string | null;
+    userEmail?: string | null;
 };
 
 type ShareLinksTableProps = {
@@ -155,6 +160,41 @@ export default function ShareLinksTable({
                 );
             }
         },
+        {
+            accessorKey: "userId",
+            friendlyName: t("user"),
+            header: ({ column }) => {
+                return (
+                    <Button
+                        variant="ghost"
+                        onClick={() =>
+                            column.toggleSorting(column.getIsSorted() === "asc")
+                        }
+                    >
+                        {t("user")}
+                        <ArrowUpDown className="ml-2 h-4 w-4" />
+                    </Button>
+                );
+            },
+            cell: ({ row }) => {
+                const r = row.original;
+                if (!r.userId) {
+                    return <span>-</span>;
+                }
+                return (
+                    <Link href={`/${orgId}/settings/access/users/${r.userId}`}>
+                        <Button variant="outline" size="sm">
+                            {getUserDisplayName({
+                                email: r.userEmail,
+                                name: r.userName,
+                                username: r.username
+                            })}
+                            <ArrowUpRight className="ml-2 h-3 w-3" />
+                        </Button>
+                    </Link>
+                );
+            }
+        },
         // {
         //     accessorKey: "domain",
         //     header: "Link",
diff --git a/src/components/user-selector.tsx b/src/components/user-selector.tsx
new file mode 100644
index 000000000..f8ad85eea
--- /dev/null
+++ b/src/components/user-selector.tsx
@@ -0,0 +1,106 @@
+import { orgQueries } from "@app/lib/queries";
+import { getUserDisplayName } from "@app/lib/getUserDisplayName";
+import { useQuery } from "@tanstack/react-query";
+import {
+    Command,
+    CommandEmpty,
+    CommandGroup,
+    CommandInput,
+    CommandItem,
+    CommandList
+} from "./ui/command";
+import { useMemo, useState } from "react";
+import { useTranslations } from "next-intl";
+import { CheckIcon } from "lucide-react";
+import { cn } from "@app/lib/cn";
+import { useDebounce } from "use-debounce";
+import type { SelectedUser } from "./users-selector";
+
+export type { SelectedUser };
+
+export type UserSelectorProps = {
+    orgId: string;
+    selectedUser?: SelectedUser | null;
+    onSelectUser: (user: SelectedUser | null) => void;
+    allowClear?: boolean;
+};
+
+export function UserSelector({
+    orgId,
+    selectedUser,
+    onSelectUser,
+    allowClear = true
+}: UserSelectorProps) {
+    const t = useTranslations();
+    const [userSearchQuery, setUserSearchQuery] = useState("");
+    const [debouncedValue] = useDebounce(userSearchQuery, 150);
+
+    const { data: users = [] } = useQuery(
+        orgQueries.users({ orgId, perPage: 10, query: debouncedValue })
+    );
+
+    const usersShown = useMemo(() => {
+        const allUsers: Array<SelectedUser> = users.map((u) => ({
+            id: u.id,
+            text: getUserDisplayName(u)
+        }));
+        if (
+            debouncedValue.trim().length === 0 &&
+            selectedUser &&
+            !allUsers.find((user) => user.id === selectedUser.id)
+        ) {
+            allUsers.unshift(selectedUser);
+        }
+        return allUsers;
+    }, [users, selectedUser, debouncedValue]);
+
+    return (
+        <Command shouldFilter={false}>
+            <CommandInput
+                placeholder={t("userSearch")}
+                value={userSearchQuery}
+                onValueChange={setUserSearchQuery}
+            />
+            <CommandList>
+                <CommandEmpty>{t("usersNotFound")}</CommandEmpty>
+                <CommandGroup>
+                    {allowClear && (
+                        <CommandItem
+                            value="__none__"
+                            onSelect={() => {
+                                onSelectUser(null);
+                            }}
+                        >
+                            <CheckIcon
+                                className={cn(
+                                    "mr-2 h-4 w-4",
+                                    !selectedUser ? "opacity-100" : "opacity-0"
+                                )}
+                            />
+                            {t("none")}
+                        </CommandItem>
+                    )}
+                    {usersShown.map((user) => (
+                        <CommandItem
+                            value={`${user.text}:${user.id}`}
+                            key={user.id}
+                            onSelect={() => {
+                                onSelectUser(user);
+                            }}
+                        >
+                            <CheckIcon
+                                className={cn(
+                                    "mr-2 h-4 w-4",
+                                    user.id === selectedUser?.id
+                                        ? "opacity-100"
+                                        : "opacity-0"
+                                )}
+                            />
+                            {user.text}
+                        </CommandItem>
+                    ))}
+                </CommandGroup>
+            </CommandList>
+        </Command>
+    );
+}

From 6e8283957ce982eb477e9121d9ac6f002e6dfbdb Mon Sep 17 00:00:00 2001
From: miloschwartz <mschwartz10612@gmail.com>
Date: Fri, 17 Jul 2026 14:06:35 -0400
Subject: [PATCH 77/94] update remote node routes to support access token
 updates

---
 messages/en-US.json              |   2 +-
 server/private/routers/hybrid.ts | 319 ++++++++++++++++++++++++++++++-
 2 files changed, 318 insertions(+), 3 deletions(-)

diff --git a/messages/en-US.json b/messages/en-US.json
index bdd884d45..59b9f86d1 100644
--- a/messages/en-US.json
+++ b/messages/en-US.json
@@ -203,7 +203,7 @@
     "expireIn": "Expire In",
     "neverExpire": "Never expire",
     "sharePersistSession": "Persist session after first use",
-    "sharePersistSessionDescription": "When enabled, the first request with this token sets a session cookie so later requests do not need the token. Leave off for API clients that should send the token on every request.",
+    "sharePersistSessionDescription": "When enabled, the first request with this token via a query param or header sets a session cookie so later requests do not need the token. Leave off for API clients that should send the token on every request.",
     "shareExpireDescription": "Expiration time is how long the link will be usable and provide access to the resource. After this time, the link will no longer work, and users who used this link will lose access to the resource.",
     "shareSeeOnce": "You will only be able to see this link once. Make sure to copy it.",
     "shareAccessHint": "Anyone with this link can access the resource. Share it with care.",
diff --git a/server/private/routers/hybrid.ts b/server/private/routers/hybrid.ts
index 124db587a..06799bcd6 100644
--- a/server/private/routers/hybrid.ts
+++ b/server/private/routers/hybrid.ts
@@ -58,7 +58,8 @@ import {
     resourceRules,
     resourcePolicyRules,
     userOrgRoles,
-    roles
+    roles,
+    resourceAccessToken
 } from "@server/db";
 import { eq, and, inArray, isNotNull, isNull, ne, or, sql } from "drizzle-orm";
 import { alias } from "@server/db";
@@ -81,11 +82,16 @@ import config from "@server/lib/config";
 import { exchangeSession } from "@server/routers/badger";
 import {
     ResourceSessionValidationResult,
+    createResourceSession,
+    serializeResourceSessionCookie,
     validateResourceSessionToken
 } from "@server/auth/sessions/resource";
 import { checkExitNodeOrg, resolveExitNodes } from "#private/lib/exitNodes";
 import { maxmindLookup } from "@server/db/maxmind";
 import { verifyResourceAccessToken } from "@server/auth/verifyResourceAccessToken";
+import { generateSessionToken } from "@server/auth/sessions/app";
+import { logAccessAudit } from "#private/lib/logAccessAudit";
+import { getUserOrgRoles } from "@server/lib/userOrgRoles";
 import semver from "semver";
 import { maxmindAsnLookup } from "@server/db/maxmindAsn";
 import { checkOrgAccessPolicy } from "@server/lib/checkOrgAccessPolicy";
@@ -178,6 +184,73 @@ const validateResourceAccessTokenBodySchema = z.strictObject({
     accessToken: z.string()
 });
 
+const createAccessTokenSessionParamsSchema = z.strictObject({
+    resourceId: z.coerce.number().int().positive()
+});
+
+const createAccessTokenSessionBodySchema = z.strictObject({
+    accessTokenId: z.string().min(1)
+});
+
+const getAccessTokenParamsSchema = z.strictObject({
+    accessTokenId: z.string().min(1)
+});
+
+const logAccessAuditBodySchema = z.strictObject({
+    action: z.boolean(),
+    type: z.string(),
+    orgId: z.string(),
+    resourceId: z.number().optional(),
+    siteResourceId: z.number().optional(),
+    user: z
+        .object({
+            username: z.string(),
+            userId: z.string()
+        })
+        .optional(),
+    apiKey: z
+        .object({
+            name: z.string().nullable(),
+            apiKeyId: z.string()
+        })
+        .optional(),
+    metadata: z.any().optional(),
+    userAgent: z.string().optional(),
+    requestIp: z.string().optional()
+});
+
+type AccessTokenUserData = {
+    userId: string;
+    username: string;
+    email: string | null;
+    name: string | null;
+    role: string | null;
+};
+
+async function resolveAccessTokenUserData(
+    userId: string,
+    orgId: string
+): Promise<AccessTokenUserData | undefined> {
+    const [user] = await db
+        .select()
+        .from(users)
+        .where(eq(users.userId, userId))
+        .limit(1);
+
+    if (!user) {
+        return undefined;
+    }
+
+    const userOrgRoles = await getUserOrgRoles(user.userId, orgId);
+    return {
+        userId: user.userId,
+        username: user.username,
+        email: user.email,
+        name: user.name,
+        role: userOrgRoles.map((r) => r.roleName).join(", ") || null
+    };
+}
+
 // Certificates by domains query validation
 const getCertificatesByDomainsQuerySchema = z.strictObject({
     // Accept domains as string or array (domains or domains[])
@@ -1829,8 +1902,23 @@ hybridRouter.post(
                 resourceId
             });
 
+            let userData: AccessTokenUserData | undefined;
+            if (
+                result.valid &&
+                result.tokenItem?.userId &&
+                result.tokenItem.orgId
+            ) {
+                userData = await resolveAccessTokenUserData(
+                    result.tokenItem.userId,
+                    result.tokenItem.orgId
+                );
+            }
+
             return response(res, {
-                data: result,
+                data: {
+                    ...result,
+                    userData
+                },
                 success: true,
                 error: false,
                 message: result.valid
@@ -1850,6 +1938,233 @@ hybridRouter.post(
     }
 );
 
+// Create a resource session from a valid access token (for remote nodes)
+hybridRouter.post(
+    "/resource/:resourceId/session/create-access-token",
+    async (req: Request, res: Response, next: NextFunction) => {
+        try {
+            const parsedParams = createAccessTokenSessionParamsSchema.safeParse(
+                req.params
+            );
+            if (!parsedParams.success) {
+                return next(
+                    createHttpError(
+                        HttpCode.BAD_REQUEST,
+                        fromError(parsedParams.error).toString()
+                    )
+                );
+            }
+
+            const parsedBody = createAccessTokenSessionBodySchema.safeParse(
+                req.body
+            );
+            if (!parsedBody.success) {
+                return next(
+                    createHttpError(
+                        HttpCode.BAD_REQUEST,
+                        fromError(parsedBody.error).toString()
+                    )
+                );
+            }
+
+            const { resourceId } = parsedParams.data;
+            const { accessTokenId } = parsedBody.data;
+
+            const [tokenItem] = await db
+                .select()
+                .from(resourceAccessToken)
+                .where(eq(resourceAccessToken.accessTokenId, accessTokenId))
+                .limit(1);
+
+            if (!tokenItem || tokenItem.resourceId !== resourceId) {
+                return next(
+                    createHttpError(
+                        HttpCode.NOT_FOUND,
+                        "Access token not found"
+                    )
+                );
+            }
+
+            if (!tokenItem.persistSession) {
+                return next(
+                    createHttpError(
+                        HttpCode.BAD_REQUEST,
+                        "Access token does not allow session persistence"
+                    )
+                );
+            }
+
+            const [resource] = await db
+                .select()
+                .from(resources)
+                .where(eq(resources.resourceId, resourceId))
+                .limit(1);
+
+            if (!resource || !resource.fullDomain) {
+                return next(
+                    createHttpError(HttpCode.NOT_FOUND, "Resource not found")
+                );
+            }
+
+            const token = generateSessionToken();
+            const sess = await createResourceSession({
+                resourceId: resource.resourceId,
+                token,
+                accessTokenId: tokenItem.accessTokenId,
+                sessionLength: tokenItem.sessionLength,
+                expiresAt: tokenItem.expiresAt,
+                doNotExtend: tokenItem.expiresAt ? true : false
+            });
+
+            const cookieName = config.getRawConfig().server.session_cookie_name;
+            const cookie = serializeResourceSessionCookie(
+                cookieName,
+                resource.fullDomain,
+                token,
+                !resource.ssl,
+                new Date(sess.expiresAt)
+            );
+
+            return response(res, {
+                data: { cookie },
+                success: true,
+                error: false,
+                message: "Access token session created successfully",
+                status: HttpCode.OK
+            });
+        } catch (error) {
+            logger.error(error);
+            return next(
+                createHttpError(
+                    HttpCode.INTERNAL_SERVER_ERROR,
+                    "Failed to create access token session"
+                )
+            );
+        }
+    }
+);
+
+// Resolve access token metadata for remote nodes (cookie session path)
+hybridRouter.get(
+    "/resource/access-token/:accessTokenId",
+    async (req: Request, res: Response, next: NextFunction) => {
+        try {
+            const parsedParams = getAccessTokenParamsSchema.safeParse(
+                req.params
+            );
+            if (!parsedParams.success) {
+                return next(
+                    createHttpError(
+                        HttpCode.BAD_REQUEST,
+                        fromError(parsedParams.error).toString()
+                    )
+                );
+            }
+
+            const { accessTokenId } = parsedParams.data;
+
+            const [tokenItem] = await db
+                .select()
+                .from(resourceAccessToken)
+                .where(eq(resourceAccessToken.accessTokenId, accessTokenId))
+                .limit(1);
+
+            if (!tokenItem) {
+                return next(
+                    createHttpError(
+                        HttpCode.NOT_FOUND,
+                        "Access token not found"
+                    )
+                );
+            }
+
+            let userData: AccessTokenUserData | undefined;
+            if (tokenItem.userId) {
+                userData = await resolveAccessTokenUserData(
+                    tokenItem.userId,
+                    tokenItem.orgId
+                );
+            }
+
+            return response(res, {
+                data: { tokenItem, userData },
+                success: true,
+                error: false,
+                message: "Access token retrieved successfully",
+                status: HttpCode.OK
+            });
+        } catch (error) {
+            logger.error(error);
+            return next(
+                createHttpError(
+                    HttpCode.INTERNAL_SERVER_ERROR,
+                    "Failed to get access token"
+                )
+            );
+        }
+    }
+);
+
+// Access audit log from remote nodes
+hybridRouter.post(
+    "/logs/access",
+    async (req: Request, res: Response, next: NextFunction) => {
+        try {
+            const parsedBody = logAccessAuditBodySchema.safeParse(req.body);
+            if (!parsedBody.success) {
+                return next(
+                    createHttpError(
+                        HttpCode.BAD_REQUEST,
+                        fromError(parsedBody.error).toString()
+                    )
+                );
+            }
+
+            const remoteExitNode = req.remoteExitNode;
+            if (!remoteExitNode || !remoteExitNode.exitNodeId) {
+                return next(
+                    createHttpError(
+                        HttpCode.BAD_REQUEST,
+                        "Remote exit node not found"
+                    )
+                );
+            }
+
+            if (
+                await checkExitNodeOrg(
+                    remoteExitNode.exitNodeId,
+                    parsedBody.data.orgId
+                )
+            ) {
+                return next(
+                    createHttpError(
+                        HttpCode.FORBIDDEN,
+                        "Exit node not allowed for this organization"
+                    )
+                );
+            }
+
+            await logAccessAudit(parsedBody.data);
+
+            return response(res, {
+                data: null,
+                success: true,
+                error: false,
+                message: "Access audit log saved successfully",
+                status: HttpCode.OK
+            });
+        } catch (error) {
+            logger.error(error);
+            return next(
+                createHttpError(
+                    HttpCode.INTERNAL_SERVER_ERROR,
+                    "Failed to save access audit log"
+                )
+            );
+        }
+    }
+);
+
 const geoIpLookupParamsSchema = z.object({
     ip: z.union([z.ipv4(), z.ipv6()])
 });

From eb3a3eac98b680a72c04bf3358e1d5f096cedeac Mon Sep 17 00:00:00 2001
From: miloschwartz <mschwartz10612@gmail.com>
Date: Fri, 17 Jul 2026 15:58:13 -0400
Subject: [PATCH 78/94] add 1.21 migrations

---
 server/lib/consts.ts                 |  2 +-
 server/setup/migrationsPg.ts         |  4 +-
 server/setup/migrationsSqlite.ts     |  4 +-
 server/setup/scriptsPg/1.21.0.ts     | 46 ++++++++++++++++++++++
 server/setup/scriptsSqlite/1.21.0.ts | 57 ++++++++++++++++++++++++++++
 5 files changed, 110 insertions(+), 3 deletions(-)
 create mode 100644 server/setup/scriptsPg/1.21.0.ts
 create mode 100644 server/setup/scriptsSqlite/1.21.0.ts

diff --git a/server/lib/consts.ts b/server/lib/consts.ts
index 57a4836b8..9ee4ec4c3 100644
--- a/server/lib/consts.ts
+++ b/server/lib/consts.ts
@@ -2,7 +2,7 @@ import path from "path";
 import { fileURLToPath } from "url";
 
 // This is a placeholder value replaced by the build process
-export const APP_VERSION = "1.20.0";
+export const APP_VERSION = "1.21.0";
 
 export const __FILENAME = fileURLToPath(import.meta.url);
 export const __DIRNAME = path.dirname(__FILENAME);
diff --git a/server/setup/migrationsPg.ts b/server/setup/migrationsPg.ts
index a271ef96d..4a6d4861c 100644
--- a/server/setup/migrationsPg.ts
+++ b/server/setup/migrationsPg.ts
@@ -27,6 +27,7 @@ import m18 from "./scriptsPg/1.18.3";
 import m19 from "./scriptsPg/1.18.4";
 import m20 from "./scriptsPg/1.19.0";
 import m21 from "./scriptsPg/1.20.0";
+import m22 from "./scriptsPg/1.21.0";
 
 // THIS CANNOT IMPORT ANYTHING FROM THE SERVER
 // EXCEPT FOR THE DATABASE AND THE SCHEMA
@@ -53,7 +54,8 @@ const migrations = [
     { version: "1.18.3", run: m18 },
     { version: "1.18.4", run: m19 },
     { version: "1.19.0", run: m20 },
-    { version: "1.20.0", run: m21 }
+    { version: "1.20.0", run: m21 },
+    { version: "1.21.0", run: m22 }
     // Add new migrations here as they are created
 ] as {
     version: string;
diff --git a/server/setup/migrationsSqlite.ts b/server/setup/migrationsSqlite.ts
index a8f6f9e33..c6b4debef 100644
--- a/server/setup/migrationsSqlite.ts
+++ b/server/setup/migrationsSqlite.ts
@@ -46,6 +46,7 @@ import m40 from "./scriptsSqlite/1.18.4";
 import m41 from "./scriptsSqlite/1.19.0";
 import m42 from "./scriptsSqlite/1.19.1";
 import m43 from "./scriptsSqlite/1.20.0";
+import m44 from "./scriptsSqlite/1.21.0";
 
 // THIS CANNOT IMPORT ANYTHING FROM THE SERVER
 // EXCEPT FOR THE DATABASE AND THE SCHEMA
@@ -89,7 +90,8 @@ const migrations = [
     { version: "1.18.4", run: m40 },
     { version: "1.19.0", run: m41 },
     { version: "1.19.1", run: m42 },
-    { version: "1.20.0", run: m43 }
+    { version: "1.20.0", run: m43 },
+    { version: "1.21.0", run: m44 }
     // Add new migrations here as they are created
 ] as const;
 
diff --git a/server/setup/scriptsPg/1.21.0.ts b/server/setup/scriptsPg/1.21.0.ts
new file mode 100644
index 000000000..3a6538f8c
--- /dev/null
+++ b/server/setup/scriptsPg/1.21.0.ts
@@ -0,0 +1,46 @@
+import { db } from "@server/db/pg/driver";
+import { sql } from "drizzle-orm";
+
+const version = "1.21.0";
+
+export default async function migration() {
+    console.log(`Running setup script ${version}...`);
+
+    try {
+        await db.execute(sql`BEGIN`);
+
+        await db.execute(sql`
+            ALTER TABLE "resourceAccessToken" ADD COLUMN "userId" varchar;
+        `);
+
+        await db.execute(sql`
+            ALTER TABLE "resourceAccessToken" ADD COLUMN "persistSession" boolean DEFAULT false NOT NULL;
+        `);
+
+        await db.execute(sql`
+            ALTER TABLE "resources" ADD COLUMN "status" varchar DEFAULT 'approved';
+        `);
+
+        await db.execute(sql`
+            ALTER TABLE "siteResources" ADD COLUMN "status" varchar DEFAULT 'approved';
+        `);
+
+        await db.execute(sql`
+            ALTER TABLE "sites" ADD COLUMN "localEndpoints" varchar;
+        `);
+
+        await db.execute(sql`
+            ALTER TABLE "resourceAccessToken" ADD CONSTRAINT "resourceAccessToken_userId_user_id_fk" FOREIGN KEY ("userId") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;
+        `);
+
+        await db.execute(sql`COMMIT`);
+        console.log("Migrated database");
+    } catch (e) {
+        await db.execute(sql`ROLLBACK`);
+        console.log("Unable to migrate database");
+        console.log(e);
+        throw e;
+    }
+
+    console.log(`${version} migration complete`);
+}
diff --git a/server/setup/scriptsSqlite/1.21.0.ts b/server/setup/scriptsSqlite/1.21.0.ts
new file mode 100644
index 000000000..8fb635044
--- /dev/null
+++ b/server/setup/scriptsSqlite/1.21.0.ts
@@ -0,0 +1,57 @@
+import { APP_PATH } from "@server/lib/consts";
+import Database from "better-sqlite3";
+import path from "path";
+
+const version = "1.21.0";
+
+export default async function migration() {
+    console.log(`Running setup script ${version}...`);
+
+    const location = path.join(APP_PATH, "db", "db.sqlite");
+    const db = new Database(location);
+
+    try {
+        db.pragma("foreign_keys = OFF");
+
+        db.transaction(() => {
+            db.prepare(
+                `
+            ALTER TABLE 'resourceAccessToken' ADD 'userId' text REFERENCES user(id);
+                `
+            ).run();
+
+            db.prepare(
+                `
+            ALTER TABLE 'resourceAccessToken' ADD 'persistSession' integer DEFAULT false NOT NULL;
+                `
+            ).run();
+
+            db.prepare(
+                `
+            ALTER TABLE 'resources' ADD 'status' text DEFAULT 'approved';
+                `
+            ).run();
+
+            db.prepare(
+                `
+            ALTER TABLE 'siteResources' ADD 'status' text DEFAULT 'approved';
+                `
+            ).run();
+
+            db.prepare(
+                `
+            ALTER TABLE 'sites' ADD 'localEndpoints' text;
+                `
+            ).run();
+        })();
+
+        db.pragma("foreign_keys = ON");
+
+        console.log("Migrated database");
+    } catch (e) {
+        console.log("Failed to migrate db:", e);
+        throw e;
+    }
+
+    console.log(`${version} migration complete`);
+}

From a0b9ea76a3ee5495511f76c3640f95d7da0651b3 Mon Sep 17 00:00:00 2001
From: miloschwartz <mschwartz10612@gmail.com>
Date: Fri, 17 Jul 2026 16:22:15 -0400
Subject: [PATCH 79/94] add badger to migration

---
 server/setup/scriptsPg/1.21.0.ts     | 49 ++++++++++++++++++++++++++++
 server/setup/scriptsSqlite/1.21.0.ts | 47 ++++++++++++++++++++++++++
 2 files changed, 96 insertions(+)

diff --git a/server/setup/scriptsPg/1.21.0.ts b/server/setup/scriptsPg/1.21.0.ts
index 3a6538f8c..d5195c382 100644
--- a/server/setup/scriptsPg/1.21.0.ts
+++ b/server/setup/scriptsPg/1.21.0.ts
@@ -1,5 +1,11 @@
 import { db } from "@server/db/pg/driver";
+import { APP_PATH } from "@server/lib/consts";
 import { sql } from "drizzle-orm";
+import fs from "fs";
+import yaml from "js-yaml";
+import path from "path";
+import z from "zod";
+import { fromZodError } from "zod-validation-error";
 
 const version = "1.21.0";
 
@@ -42,5 +48,48 @@ export default async function migration() {
         throw e;
     }
 
+    try {
+        const traefikPath = path.join(
+            APP_PATH,
+            "traefik",
+            "traefik_config.yml"
+        );
+
+        const schema = z.object({
+            experimental: z.object({
+                plugins: z.object({
+                    badger: z.object({
+                        moduleName: z.string(),
+                        version: z.string()
+                    })
+                })
+            })
+        });
+
+        const traefikFileContents = fs.readFileSync(traefikPath, "utf8");
+        const traefikConfig = yaml.load(traefikFileContents) as any;
+
+        const parsedConfig = schema.safeParse(traefikConfig);
+
+        if (!parsedConfig.success) {
+            throw new Error(fromZodError(parsedConfig.error).toString());
+        }
+
+        traefikConfig.experimental.plugins.badger.version = "v1.5.0";
+
+        const updatedTraefikYaml = yaml.dump(traefikConfig);
+
+        fs.writeFileSync(traefikPath, updatedTraefikYaml, "utf8");
+
+        console.log(
+            "Updated the version of Badger in your Traefik configuration to v1.5.0"
+        );
+    } catch (e) {
+        console.log(
+            "We were unable to update the version of Badger in your Traefik configuration. Please update it manually. Check the release notes for this version for more information."
+        );
+        console.error(e);
+    }
+
     console.log(`${version} migration complete`);
 }
diff --git a/server/setup/scriptsSqlite/1.21.0.ts b/server/setup/scriptsSqlite/1.21.0.ts
index 8fb635044..b710c783b 100644
--- a/server/setup/scriptsSqlite/1.21.0.ts
+++ b/server/setup/scriptsSqlite/1.21.0.ts
@@ -1,6 +1,10 @@
 import { APP_PATH } from "@server/lib/consts";
 import Database from "better-sqlite3";
+import fs from "fs";
+import yaml from "js-yaml";
 import path from "path";
+import z from "zod";
+import { fromZodError } from "zod-validation-error";
 
 const version = "1.21.0";
 
@@ -53,5 +57,48 @@ export default async function migration() {
         throw e;
     }
 
+    try {
+        const traefikPath = path.join(
+            APP_PATH,
+            "traefik",
+            "traefik_config.yml"
+        );
+
+        const schema = z.object({
+            experimental: z.object({
+                plugins: z.object({
+                    badger: z.object({
+                        moduleName: z.string(),
+                        version: z.string()
+                    })
+                })
+            })
+        });
+
+        const traefikFileContents = fs.readFileSync(traefikPath, "utf8");
+        const traefikConfig = yaml.load(traefikFileContents) as any;
+
+        const parsedConfig = schema.safeParse(traefikConfig);
+
+        if (!parsedConfig.success) {
+            throw new Error(fromZodError(parsedConfig.error).toString());
+        }
+
+        traefikConfig.experimental.plugins.badger.version = "v1.5.0";
+
+        const updatedTraefikYaml = yaml.dump(traefikConfig);
+
+        fs.writeFileSync(traefikPath, updatedTraefikYaml, "utf8");
+
+        console.log(
+            "Updated the version of Badger in your Traefik configuration to v1.5.0"
+        );
+    } catch (e) {
+        console.log(
+            "We were unable to update the version of Badger in your Traefik configuration. Please update it manually. Check the release notes for this version for more information."
+        );
+        console.error(e);
+    }
+
     console.log(`${version} migration complete`);
 }

From 02fe1f3abdff200a1167f9bd99376f67891231f4 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Sat, 18 Jul 2026 11:53:38 -0400
Subject: [PATCH 80/94] Claify that this is only for the cloud

---
 .../emails/templates/NotifyTrialExpiring.tsx  | 24 ++++++++++---------
 1 file changed, 13 insertions(+), 11 deletions(-)

diff --git a/server/emails/templates/NotifyTrialExpiring.tsx b/server/emails/templates/NotifyTrialExpiring.tsx
index 7c712e278..a4c09e152 100644
--- a/server/emails/templates/NotifyTrialExpiring.tsx
+++ b/server/emails/templates/NotifyTrialExpiring.tsx
@@ -30,14 +30,14 @@ export const NotifyTrialExpiring = ({
     const isLastDay = daysRemaining === 1;
 
     const previewText = hasEnded
-        ? `Your trial for ${orgName} has ended.`
+        ? `Your cloud trial for ${orgName} has ended.`
         : isLastDay
-          ? `Your trial for ${orgName} ends tomorrow.`
-          : `Your trial for ${orgName} ends in ${daysRemaining} days.`;
+          ? `Your cloud trial for ${orgName} ends tomorrow.`
+          : `Your cloud trial for ${orgName} ends in ${daysRemaining} days.`;
 
     const heading = hasEnded
-        ? "Your Trial Ended"
-        : "Your Trial is Ending Soon";
+        ? "Your Cloud Trial Ended"
+        : "Your Cloud Trial is Ending Soon";
 
     return (
         <Html>
@@ -55,7 +55,7 @@ export const NotifyTrialExpiring = ({
                         {hasEnded ? (
                             <>
                                 <EmailText>
-                                    Your free trial for{" "}
+                                    Your cloud free trial for{" "}
                                     <strong>{orgName}</strong> ended on{" "}
                                     <strong>{trialEndsAt}</strong>. Your account
                                     has been moved to the free plan, which
@@ -64,10 +64,11 @@ export const NotifyTrialExpiring = ({
 
                                 <EmailText>
                                     Some features and resources may now be
-                                    restricted. To restore full
-                                    access and continue using all the features
-                                    you had during your trial, please upgrade to
-                                    a paid plan.
+                                    restricted. To restore full access and
+                                    continue using all the features you had
+                                    during your trial, please upgrade to a paid
+                                    plan. This does not effect any self hosted
+                                    licenses.
                                 </EmailText>
 
                                 <EmailText>
@@ -93,7 +94,8 @@ export const NotifyTrialExpiring = ({
                                 <EmailText>
                                     After your trial ends, your account will be
                                     moved to the free plan and some
-                                    functionality may be restricted.
+                                    functionality may be restricted. This does
+                                    not effect any self hosted licenses.
                                 </EmailText>
 
                                 <EmailText>

From 9e2ec72ced565578ccc4f916bc4917871adfa97e Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Sat, 18 Jul 2026 16:15:30 -0400
Subject: [PATCH 81/94] Fix missing resource id in cache

---
 server/routers/badger/verifySession.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/routers/badger/verifySession.ts b/server/routers/badger/verifySession.ts
index 901c881f2..33c75b101 100644
--- a/server/routers/badger/verifySession.ts
+++ b/server/routers/badger/verifySession.ts
@@ -418,7 +418,7 @@ export async function verifyResourceSession(
         }
 
         // check for HTTP Basic Auth header
-        const clientHeaderAuthKey = `headerAuth:${clientHeaderAuth}`;
+        const clientHeaderAuthKey = `headerAuth:${resource.resourceId}:${clientHeaderAuth}`;
         if (headerAuth && clientHeaderAuth) {
             if (localCache.get(clientHeaderAuthKey)) {
                 logger.debug(

From a2e1c7b751f660983ac46641ad8a74a9d8c418f2 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Sat, 18 Jul 2026 16:30:29 -0400
Subject: [PATCH 82/94] Go to domains if no domains

---
 messages/en-US.json             |  3 +++
 src/components/DomainPicker.tsx | 26 +++++++++++++++++++++++++-
 2 files changed, 28 insertions(+), 1 deletion(-)

diff --git a/messages/en-US.json b/messages/en-US.json
index 59b9f86d1..2ca25d850 100644
--- a/messages/en-US.json
+++ b/messages/en-US.json
@@ -1995,6 +1995,9 @@
     "domainPickerSubdomain": "Subdomain: {subdomain}",
     "domainPickerNamespace": "Namespace: {namespace}",
     "domainPickerShowMore": "Show More",
+    "domainPickerNoDomainsAvailableTitle": "No domains available",
+    "domainPickerNoDomainsAvailableDescription": "You don't have any domains set up yet. Create a domain to continue.",
+    "domainPickerNoDomainsAvailableAction": "Go to Domains",
     "regionSelectorTitle": "Select Region",
     "domainPickerRemoteExitNodeWarning": "Provided domains are not supported when sites connect to remote exit nodes. For resources to be available on remote nodes, use a custom domain instead.",
     "regionSelectorInfo": "Selecting a region helps us provide better performance for your location. You do not have to be in the same region as your server.",
diff --git a/src/components/DomainPicker.tsx b/src/components/DomainPicker.tsx
index daacf892b..e06c3e57d 100644
--- a/src/components/DomainPicker.tsx
+++ b/src/components/DomainPicker.tsx
@@ -1,6 +1,6 @@
 "use client";
 
-import { Alert, AlertDescription } from "@/components/ui/alert";
+import { Alert, AlertDescription, AlertTitle } from "@/components/ui/alert";
 import { Button } from "@/components/ui/button";
 import { Card, CardContent } from "@/components/ui/card";
 import {
@@ -43,10 +43,12 @@ import {
     CheckCircle2,
     ChevronsUpDown,
     ExternalLink,
+    Globe,
     KeyRound,
     Zap
 } from "lucide-react";
 import { useTranslations } from "next-intl";
+import Link from "next/link";
 import { PaidFeaturesAlert } from "@app/components/PaidFeaturesAlert";
 import { usePaidStatus } from "@/hooks/usePaidStatus";
 import { TierFeature, tierMatrix } from "@server/lib/billing/tierMatrix";
@@ -494,6 +496,28 @@ export default function DomainPicker({
     const hasMoreProvided =
         sortedAvailableOptions.length > providedDomainsShown;
 
+    const noDomainsAvailable =
+        !loadingDomains &&
+        organizationDomains.length === 0 &&
+        (build === "oss" || hideFreeDomain || requiresPaywall);
+
+    if (noDomainsAvailable) {
+        return (
+            <Alert>
+                <Globe className="h-4 w-4" />
+                <AlertTitle>{t("domainPickerNoDomainsAvailableTitle")}</AlertTitle>
+                <AlertDescription className="space-y-3">
+                    <p>{t("domainPickerNoDomainsAvailableDescription")}</p>
+                    <Button asChild size="sm" variant="outline">
+                        <Link href={`/${orgId}/settings/domains`}>
+                            {t("domainPickerNoDomainsAvailableAction")}
+                        </Link>
+                    </Button>
+                </AlertDescription>
+            </Alert>
+        );
+    }
+
     return (
         <div className="space-y-4">
             <div className="grid grid-cols-1 sm:grid-cols-2 gap-4">

From 9561d23f1e77cdea5d69db820639c0ebc62f03e1 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Sun, 19 Jul 2026 14:41:07 -0400
Subject: [PATCH 83/94] Resovle endcoding issue

---
 server/lib/pathMatch.ts                     | 37 +++++++++++++++++++--
 server/routers/badger/verifySession.test.ts | 32 ++++++++++++++++++
 2 files changed, 66 insertions(+), 3 deletions(-)

diff --git a/server/lib/pathMatch.ts b/server/lib/pathMatch.ts
index a007f9ec3..8ef579607 100644
--- a/server/lib/pathMatch.ts
+++ b/server/lib/pathMatch.ts
@@ -15,10 +15,41 @@ function getSegmentRegex(patternPart: string): RegExp {
     return regex;
 }
 
+// Decodes percent-encoding (so an encoded slash like `%2F` is treated as a
+// real path separator, matching what most backends will do) and then
+// resolves `.` / `..` segments, so a request like `/public%2F..%2Fadmin/`
+// or `/public/../admin/` is matched as `/admin/`, not as a literal segment
+// or a wildcard-swallowed sequence under `/public/*`.
+function decodeAndResolvePath(p: string): string[] {
+    const rawParts = p.split("/").filter(Boolean);
+
+    const resolved: string[] = [];
+    for (const rawPart of rawParts) {
+        let part: string;
+        try {
+            part = decodeURIComponent(rawPart);
+        } catch {
+            part = rawPart;
+        }
+
+        // an encoded slash can turn one raw segment into several real ones
+        for (const segment of part.split("/").filter(Boolean)) {
+            if (segment === ".") {
+                continue;
+            } else if (segment === "..") {
+                resolved.pop();
+            } else {
+                resolved.push(segment);
+            }
+        }
+    }
+
+    return resolved;
+}
+
 export function isPathAllowed(pattern: string, path: string): boolean {
-    const normalize = (p: string) => p.split("/").filter(Boolean);
-    const patternParts = normalize(pattern);
-    const pathParts = normalize(path);
+    const patternParts = pattern.split("/").filter(Boolean);
+    const pathParts = decodeAndResolvePath(path);
 
     function matchSegments(
         patternIndex: number,
diff --git a/server/routers/badger/verifySession.test.ts b/server/routers/badger/verifySession.test.ts
index 681717f9c..c91805f8e 100644
--- a/server/routers/badger/verifySession.test.ts
+++ b/server/routers/badger/verifySession.test.ts
@@ -236,6 +236,38 @@ function runTests() {
         "Root path should not match non-root path"
     );
 
+    // Path traversal / encoded-slash bypass regression tests
+    assertEquals(
+        isPathAllowed("public/*", "public/../admin"),
+        false,
+        "Literal .. traversal out of an allowed prefix must not match"
+    );
+    assertEquals(
+        isPathAllowed("public/*", "public%2F..%2Fadmin"),
+        false,
+        "Encoded-slash traversal out of an allowed prefix must not match"
+    );
+    assertEquals(
+        isPathAllowed("public/*", "public%2f..%2fadmin%2ffile"),
+        false,
+        "Encoded-slash traversal is case-insensitively decoded before matching"
+    );
+    assertEquals(
+        isPathAllowed("admin/*", "public/../admin/secret"),
+        true,
+        ".. traversal INTO a restricted path should still be caught by its own rule"
+    );
+    assertEquals(
+        isPathAllowed("public/*", "public%2Ffoo"),
+        true,
+        "Encoded slash without traversal should still resolve and match normally"
+    );
+    assertEquals(
+        isPathAllowed("public/*", "public/./foo"),
+        true,
+        "Single-dot segments are a no-op and should not affect matching"
+    );
+
     console.log("All path matching tests passed!");
 }
 

From 4d8cb7e2311f3bf4987bc40b1bb15dab652bcc58 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Thu, 9 Jul 2026 20:23:19 -0400
Subject: [PATCH 84/94] Add aliaes for public/private resources

---
 .../accessToken/generateAccessToken.ts        |  33 +++
 .../routers/accessToken/listAccessTokens.ts   |  29 +++
 server/routers/integration.ts                 | 223 +++++++++++++-----
 server/routers/policy/getResourcePolicy.ts    |  13 +
 .../policy/setResourcePolicyAccessControl.ts  |  19 ++
 .../policy/setResourcePolicyHeaderAuth.ts     |  19 ++
 .../policy/setResourcePolicyPassword.ts       |  19 ++
 .../policy/setResourcePolicyPincode.ts        |  19 ++
 .../routers/policy/setResourcePolicyRules.ts  |  19 ++
 .../policy/setResourcePolicyWhitelist.ts      |  19 ++
 server/routers/policy/updateResourcePolicy.ts |  18 ++
 .../resource/addEmailToResourceWhitelist.ts   |  33 +++
 server/routers/resource/addRoleToResource.ts  |  34 +++
 server/routers/resource/addUserToResource.ts  |  34 +++
 server/routers/resource/createResource.ts     |  33 +++
 server/routers/resource/createResourceRule.ts |  33 +++
 server/routers/resource/deleteResource.ts     |  26 ++
 server/routers/resource/deleteResourceRule.ts |  26 ++
 server/routers/resource/getResource.ts        |  28 +++
 .../routers/resource/getResourcePolicies.ts   |  11 +
 .../routers/resource/getResourceWhitelist.ts  |  26 ++
 .../routers/resource/listAllResourceNames.ts  |  28 +++
 server/routers/resource/listResourceRoles.ts  |  26 ++
 server/routers/resource/listResourceRules.ts  |  27 +++
 server/routers/resource/listResourceUsers.ts  |  26 ++
 server/routers/resource/listResources.ts      |  29 +++
 .../removeEmailFromResourceWhitelist.ts       |  33 +++
 .../resource/removeRoleFromResource.ts        |  33 +++
 .../resource/removeUserFromResource.ts        |  33 +++
 .../routers/resource/setResourceHeaderAuth.ts |  34 +++
 .../routers/resource/setResourcePassword.ts   |  34 +++
 server/routers/resource/setResourcePincode.ts |  34 +++
 server/routers/resource/setResourceRoles.ts   |  34 +++
 server/routers/resource/setResourceUsers.ts   |  34 +++
 .../routers/resource/setResourceWhitelist.ts  |  34 +++
 server/routers/resource/updateResource.ts     |  36 +++
 server/routers/resource/updateResourceRule.ts |  33 +++
 .../siteResource/addClientToSiteResource.ts   |  34 +++
 .../siteResource/addRoleToSiteResource.ts     |  33 +++
 .../siteResource/addUserToSiteResource.ts     |  33 +++
 .../batchAddClientToSiteResources.ts          |  33 +++
 .../siteResource/createSiteResource.ts        |  33 +++
 .../siteResource/deleteSiteResource.ts        |  26 ++
 .../routers/siteResource/getSiteResource.ts   |  30 +++
 .../siteResource/listAllSiteResourcesByOrg.ts |  27 +++
 .../siteResource/listSiteResourceClients.ts   |  26 ++
 .../siteResource/listSiteResourceRoles.ts     |  26 ++
 .../siteResource/listSiteResourceUsers.ts     |  26 ++
 .../routers/siteResource/listSiteResources.ts |  27 +++
 .../removeClientFromSiteResource.ts           |  34 +++
 .../removeRoleFromSiteResource.ts             |  33 +++
 .../removeUserFromSiteResource.ts             |  33 +++
 .../siteResource/setSiteResourceClients.ts    |  34 +++
 .../siteResource/setSiteResourceRoles.ts      |  34 +++
 .../siteResource/setSiteResourceUsers.ts      |  34 +++
 .../siteResource/updateSiteResource.ts        |  33 +++
 server/routers/target/createTarget.ts         |  33 +++
 server/routers/target/listTargets.ts          |  27 +++
 58 files changed, 1812 insertions(+), 59 deletions(-)

diff --git a/server/routers/accessToken/generateAccessToken.ts b/server/routers/accessToken/generateAccessToken.ts
index 5b259af70..c46e94162 100644
--- a/server/routers/accessToken/generateAccessToken.ts
+++ b/server/routers/accessToken/generateAccessToken.ts
@@ -74,6 +74,39 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/public-resource/{resourceId}/access-token",
+    description: "Generate a new access token for a resource.",
+    tags: [OpenAPITags.PublicResource, OpenAPITags.AccessToken],
+    request: {
+        params: generateAccssTokenParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: generateAccessTokenBodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function generateAccessToken(
     req: Request,
     res: Response,
diff --git a/server/routers/accessToken/listAccessTokens.ts b/server/routers/accessToken/listAccessTokens.ts
index a5ec3b540..0068e459a 100644
--- a/server/routers/accessToken/listAccessTokens.ts
+++ b/server/routers/accessToken/listAccessTokens.ts
@@ -184,6 +184,35 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "get",
+    path: "/public-resource/{resourceId}/access-tokens",
+    description: "List all access tokens for a resource.",
+    tags: [OpenAPITags.PublicResource, OpenAPITags.AccessToken],
+    request: {
+        params: z.object({
+            resourceId: z.number()
+        }),
+        query: listAccessTokensSchema
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function listAccessTokens(
     req: Request,
     res: Response,
diff --git a/server/routers/integration.ts b/server/routers/integration.ts
index 567c3060e..d16efdb63 100644
--- a/server/routers/integration.ts
+++ b/server/routers/integration.ts
@@ -163,7 +163,7 @@ authenticated.get(
 
 // Site Resource endpoints
 authenticated.put(
-    "/org/:orgId/site-resource",
+    ["/org/:orgId/site-resource", "/org/:orgId/private-resource"],
     verifyApiKeyOrgAccess,
     verifyLimits,
     verifyApiKeyHasAction(ActionsEnum.createSiteResource),
@@ -172,7 +172,10 @@ authenticated.put(
 );
 
 authenticated.get(
-    "/org/:orgId/site/:siteId/resources",
+    [
+        "/org/:orgId/site/:siteId/resources",
+        "/org/:orgId/site/:siteId/private-resources"
+    ],
     verifyApiKeyOrgAccess,
     verifyApiKeySiteAccess,
     verifyApiKeyHasAction(ActionsEnum.listSiteResources),
@@ -180,21 +183,21 @@ authenticated.get(
 );
 
 authenticated.get(
-    "/org/:orgId/site-resources",
+    ["/org/:orgId/site-resources", "/org/:orgId/private-resources"],
     verifyApiKeyOrgAccess,
     verifyApiKeyHasAction(ActionsEnum.listSiteResources),
     siteResource.listAllSiteResourcesByOrg
 );
 
 authenticated.get(
-    "/site-resource/:siteResourceId",
+    ["/site-resource/:siteResourceId", "/private-resource/:siteResourceId"],
     verifyApiKeySiteResourceAccess,
     verifyApiKeyHasAction(ActionsEnum.getSiteResource),
     siteResource.getSiteResource
 );
 
 authenticated.post(
-    "/site-resource/:siteResourceId",
+    ["/site-resource/:siteResourceId", "/private-resource/:siteResourceId"],
     verifyApiKeySiteResourceAccess,
     verifyLimits,
     verifyApiKeyHasAction(ActionsEnum.updateSiteResource),
@@ -203,7 +206,7 @@ authenticated.post(
 );
 
 authenticated.delete(
-    "/site-resource/:siteResourceId",
+    ["/site-resource/:siteResourceId", "/private-resource/:siteResourceId"],
     verifyApiKeySiteResourceAccess,
     verifyApiKeyHasAction(ActionsEnum.deleteSiteResource),
     logActionAudit(ActionsEnum.deleteSiteResource),
@@ -211,28 +214,40 @@ authenticated.delete(
 );
 
 authenticated.get(
-    "/site-resource/:siteResourceId/roles",
+    [
+        "/site-resource/:siteResourceId/roles",
+        "/private-resource/:siteResourceId/roles"
+    ],
     verifyApiKeySiteResourceAccess,
     verifyApiKeyHasAction(ActionsEnum.listResourceRoles),
     siteResource.listSiteResourceRoles
 );
 
 authenticated.get(
-    "/site-resource/:siteResourceId/users",
+    [
+        "/site-resource/:siteResourceId/users",
+        "/private-resource/:siteResourceId/users"
+    ],
     verifyApiKeySiteResourceAccess,
     verifyApiKeyHasAction(ActionsEnum.listResourceUsers),
     siteResource.listSiteResourceUsers
 );
 
 authenticated.get(
-    "/site-resource/:siteResourceId/clients",
+    [
+        "/site-resource/:siteResourceId/clients",
+        "/private-resource/:siteResourceId/clients"
+    ],
     verifyApiKeySiteResourceAccess,
     verifyApiKeyHasAction(ActionsEnum.listResourceUsers),
     siteResource.listSiteResourceClients
 );
 
 authenticated.post(
-    "/site-resource/:siteResourceId/roles",
+    [
+        "/site-resource/:siteResourceId/roles",
+        "/private-resource/:siteResourceId/roles"
+    ],
     verifyApiKeySiteResourceAccess,
     verifyApiKeyRoleAccess,
     verifyLimits,
@@ -242,7 +257,10 @@ authenticated.post(
 );
 
 authenticated.post(
-    "/site-resource/:siteResourceId/users",
+    [
+        "/site-resource/:siteResourceId/users",
+        "/private-resource/:siteResourceId/users"
+    ],
     verifyApiKeySiteResourceAccess,
     verifyApiKeySetResourceUsers,
     verifyLimits,
@@ -252,7 +270,10 @@ authenticated.post(
 );
 
 authenticated.post(
-    "/site-resource/:siteResourceId/roles/add",
+    [
+        "/site-resource/:siteResourceId/roles/add",
+        "/private-resource/:siteResourceId/roles/add"
+    ],
     verifyApiKeySiteResourceAccess,
     verifyApiKeyRoleAccess,
     verifyLimits,
@@ -262,7 +283,10 @@ authenticated.post(
 );
 
 authenticated.post(
-    "/site-resource/:siteResourceId/roles/remove",
+    [
+        "/site-resource/:siteResourceId/roles/remove",
+        "/private-resource/:siteResourceId/roles/remove"
+    ],
     verifyApiKeySiteResourceAccess,
     verifyApiKeyRoleAccess,
     verifyLimits,
@@ -272,7 +296,10 @@ authenticated.post(
 );
 
 authenticated.post(
-    "/site-resource/:siteResourceId/users/add",
+    [
+        "/site-resource/:siteResourceId/users/add",
+        "/private-resource/:siteResourceId/users/add"
+    ],
     verifyApiKeySiteResourceAccess,
     verifyApiKeySetResourceUsers,
     verifyLimits,
@@ -282,7 +309,10 @@ authenticated.post(
 );
 
 authenticated.post(
-    "/site-resource/:siteResourceId/users/remove",
+    [
+        "/site-resource/:siteResourceId/users/remove",
+        "/private-resource/:siteResourceId/users/remove"
+    ],
     verifyApiKeySiteResourceAccess,
     verifyApiKeySetResourceUsers,
     verifyLimits,
@@ -292,7 +322,10 @@ authenticated.post(
 );
 
 authenticated.post(
-    "/site-resource/:siteResourceId/clients",
+    [
+        "/site-resource/:siteResourceId/clients",
+        "/private-resource/:siteResourceId/clients"
+    ],
     verifyApiKeySiteResourceAccess,
     verifyApiKeySetResourceClients,
     verifyLimits,
@@ -302,7 +335,10 @@ authenticated.post(
 );
 
 authenticated.post(
-    "/site-resource/:siteResourceId/clients/add",
+    [
+        "/site-resource/:siteResourceId/clients/add",
+        "/private-resource/:siteResourceId/clients/add"
+    ],
     verifyApiKeySiteResourceAccess,
     verifyApiKeySetResourceClients,
     verifyLimits,
@@ -312,7 +348,10 @@ authenticated.post(
 );
 
 authenticated.post(
-    "/site-resource/:siteResourceId/clients/remove",
+    [
+        "/site-resource/:siteResourceId/clients/remove",
+        "/private-resource/:siteResourceId/clients/remove"
+    ],
     verifyApiKeySiteResourceAccess,
     verifyApiKeySetResourceClients,
     verifyLimits,
@@ -322,7 +361,7 @@ authenticated.post(
 );
 
 authenticated.post(
-    "/client/:clientId/site-resources",
+    ["/client/:clientId/site-resources", "/client/:clientId/private-resources"],
     verifyLimits,
     verifyApiKeyHasAction(ActionsEnum.setResourceUsers),
     logActionAudit(ActionsEnum.setResourceUsers),
@@ -330,7 +369,7 @@ authenticated.post(
 );
 
 authenticated.put(
-    "/org/:orgId/resource",
+    ["/org/:orgId/resource", "/org/:orgId/public-resource"],
     verifyApiKeyOrgAccess,
     verifyLimits,
     verifyApiKeyHasAction(ActionsEnum.createResource),
@@ -339,7 +378,10 @@ authenticated.put(
 );
 
 authenticated.put(
-    "/org/:orgId/site/:siteId/resource",
+    [
+        "/org/:orgId/site/:siteId/resource",
+        "/org/:orgId/site/:siteId/public-resource"
+    ],
     verifyApiKeyOrgAccess,
     verifyLimits,
     verifyApiKeyHasAction(ActionsEnum.createResource),
@@ -348,14 +390,14 @@ authenticated.put(
 );
 
 authenticated.get(
-    "/site/:siteId/resources",
+    ["/site/:siteId/resources", "/site/:siteId/public-resources"],
     verifyApiKeySiteAccess,
     verifyApiKeyHasAction(ActionsEnum.listResources),
     resource.listResources
 );
 
 authenticated.get(
-    "/org/:orgId/resources",
+    ["/org/:orgId/resources", "/org/:orgId/public-resources"],
     verifyApiKeyOrgAccess,
     verifyApiKeyHasAction(ActionsEnum.listResources),
     resource.listResources
@@ -443,42 +485,45 @@ authenticated.delete(
 );
 
 authenticated.get(
-    "/resource/:resourceId/roles",
+    ["/resource/:resourceId/roles", "/public-resource/:resourceId/roles"],
     verifyApiKeyResourceAccess,
     verifyApiKeyHasAction(ActionsEnum.listResourceRoles),
     resource.listResourceRoles
 );
 
 authenticated.get(
-    "/resource/:resourceId/users",
+    ["/resource/:resourceId/users", "/public-resource/:resourceId/users"],
     verifyApiKeyResourceAccess,
     verifyApiKeyHasAction(ActionsEnum.listResourceUsers),
     resource.listResourceUsers
 );
 
 authenticated.get(
-    "/resource/:resourceId",
+    ["/resource/:resourceId", "/public-resource/:resourceId"],
     verifyApiKeyResourceAccess,
     verifyApiKeyHasAction(ActionsEnum.getResource),
     resource.getResource
 );
 
 authenticated.get(
-    "/resource-policy/:resourcePolicyId",
+    [
+        "/resource-policy/:resourcePolicyId",
+        "/public-resource-policy/:resourcePolicyId"
+    ],
     verifyApiKeyResourcePolicyAccess,
     verifyApiKeyHasAction(ActionsEnum.getResourcePolicy),
     policy.getResourcePolicy
 );
 
 authenticated.get(
-    "/resource/:resourceId/policies",
+    ["/resource/:resourceId/policies", "/public-resource/:resourceId/policies"],
     verifyApiKeyResourceAccess,
     verifyApiKeyHasAction(ActionsEnum.getResourcePolicy),
     resource.getResourcePolicies
 );
 
 authenticated.post(
-    "/resource/:resourceId",
+    ["/resource/:resourceId", "/public-resource/:resourceId"],
     verifyApiKeyResourceAccess,
     verifyLimits,
     verifyApiKeyHasAction(ActionsEnum.updateResource),
@@ -487,14 +532,17 @@ authenticated.post(
 );
 
 authenticated.put(
-    "/resource-policy/:resourcePolicyId",
+    [
+        "/resource-policy/:resourcePolicyId",
+        "/public-resource-policy/:resourcePolicyId"
+    ],
     verifyApiKeyResourcePolicyAccess,
     verifyApiKeyHasAction(ActionsEnum.updateResourcePolicy),
     policy.updateResourcePolicy
 );
 
 authenticated.delete(
-    "/resource/:resourceId",
+    ["/resource/:resourceId", "/public-resource/:resourceId"],
     verifyApiKeyResourceAccess,
     verifyApiKeyHasAction(ActionsEnum.deleteResource),
     logActionAudit(ActionsEnum.deleteResource),
@@ -502,7 +550,7 @@ authenticated.delete(
 );
 
 authenticated.put(
-    "/resource/:resourceId/target",
+    ["/resource/:resourceId/target", "/public-resource/:resourceId/target"],
     verifyApiKeyResourceAccess,
     verifyLimits,
     verifyApiKeyHasAction(ActionsEnum.createTarget),
@@ -511,14 +559,14 @@ authenticated.put(
 );
 
 authenticated.get(
-    "/resource/:resourceId/targets",
+    ["/resource/:resourceId/targets", "/public-resource/:resourceId/targets"],
     verifyApiKeyResourceAccess,
     verifyApiKeyHasAction(ActionsEnum.listTargets),
     target.listTargets
 );
 
 authenticated.put(
-    "/resource/:resourceId/rule",
+    ["/resource/:resourceId/rule", "/public-resource/:resourceId/rule"],
     verifyApiKeyResourceAccess,
     verifyLimits,
     verifyApiKeyHasAction(ActionsEnum.createResourceRule),
@@ -527,14 +575,17 @@ authenticated.put(
 );
 
 authenticated.get(
-    "/resource/:resourceId/rules",
+    ["/resource/:resourceId/rules", "/public-resource/:resourceId/rules"],
     verifyApiKeyResourceAccess,
     verifyApiKeyHasAction(ActionsEnum.listResourceRules),
     resource.listResourceRules
 );
 
 authenticated.post(
-    "/resource/:resourceId/rule/:ruleId",
+    [
+        "/resource/:resourceId/rule/:ruleId",
+        "/public-resource/:resourceId/rule/:ruleId"
+    ],
     verifyApiKeyResourceAccess,
     verifyLimits,
     verifyApiKeyHasAction(ActionsEnum.updateResourceRule),
@@ -543,7 +594,10 @@ authenticated.post(
 );
 
 authenticated.delete(
-    "/resource/:resourceId/rule/:ruleId",
+    [
+        "/resource/:resourceId/rule/:ruleId",
+        "/public-resource/:resourceId/rule/:ruleId"
+    ],
     verifyApiKeyResourceAccess,
     verifyApiKeyHasAction(ActionsEnum.deleteResourceRule),
     logActionAudit(ActionsEnum.deleteResourceRule),
@@ -625,7 +679,7 @@ authenticated.post(
 );
 
 authenticated.post(
-    "/resource/:resourceId/roles",
+    ["/resource/:resourceId/roles", "/public-resource/:resourceId/roles"],
     verifyApiKeyResourceAccess,
     verifyApiKeyRoleAccess,
     verifyLimits,
@@ -635,7 +689,7 @@ authenticated.post(
 );
 
 authenticated.post(
-    "/resource/:resourceId/users",
+    ["/resource/:resourceId/users", "/public-resource/:resourceId/users"],
     verifyApiKeyResourceAccess,
     verifyApiKeySetResourceUsers,
     verifyLimits,
@@ -645,7 +699,10 @@ authenticated.post(
 );
 
 authenticated.put(
-    "/resource-policy/:resourcePolicyId/access-control",
+    [
+        "/resource-policy/:resourcePolicyId/access-control",
+        "/public-resource-policy/:resourcePolicyId/access-control"
+    ],
     verifyApiKeyResourcePolicyAccess,
     verifyApiKeyRoleAccess,
     verifyLimits,
@@ -657,7 +714,10 @@ authenticated.put(
 );
 
 authenticated.put(
-    "/resource-policy/:resourcePolicyId/password",
+    [
+        "/resource-policy/:resourcePolicyId/password",
+        "/public-resource-policy/:resourcePolicyId/password"
+    ],
     verifyApiKeyResourcePolicyAccess,
     verifyLimits,
     verifyApiKeyHasAction(ActionsEnum.setResourcePolicyPassword),
@@ -666,7 +726,10 @@ authenticated.put(
 );
 
 authenticated.put(
-    "/resource-policy/:resourcePolicyId/pincode",
+    [
+        "/resource-policy/:resourcePolicyId/pincode",
+        "/public-resource-policy/:resourcePolicyId/pincode"
+    ],
     verifyApiKeyResourcePolicyAccess,
     verifyLimits,
     verifyApiKeyHasAction(ActionsEnum.setResourcePolicyPincode),
@@ -675,7 +738,10 @@ authenticated.put(
 );
 
 authenticated.put(
-    "/resource-policy/:resourcePolicyId/header-auth",
+    [
+        "/resource-policy/:resourcePolicyId/header-auth",
+        "/public-resource-policy/:resourcePolicyId/header-auth"
+    ],
     verifyApiKeyResourcePolicyAccess,
     verifyLimits,
     verifyApiKeyHasAction(ActionsEnum.setResourcePolicyHeaderAuth),
@@ -684,7 +750,10 @@ authenticated.put(
 );
 
 authenticated.put(
-    "/resource-policy/:resourcePolicyId/whitelist",
+    [
+        "/resource-policy/:resourcePolicyId/whitelist",
+        "/public-resource-policy/:resourcePolicyId/whitelist"
+    ],
     verifyApiKeyResourcePolicyAccess,
     verifyLimits,
     verifyApiKeyHasAction(ActionsEnum.setResourcePolicyWhitelist),
@@ -693,7 +762,10 @@ authenticated.put(
 );
 
 authenticated.put(
-    "/resource-policy/:resourcePolicyId/rules",
+    [
+        "/resource-policy/:resourcePolicyId/rules",
+        "/public-resource-policy/:resourcePolicyId/rules"
+    ],
     verifyApiKeyResourcePolicyAccess,
     verifyLimits,
     verifyApiKeyHasAction(ActionsEnum.setResourcePolicyRules),
@@ -702,7 +774,10 @@ authenticated.put(
 );
 
 authenticated.post(
-    "/resource/:resourceId/roles/add",
+    [
+        "/resource/:resourceId/roles/add",
+        "/public-resource/:resourceId/roles/add"
+    ],
     verifyApiKeyResourceAccess,
     verifyApiKeyRoleAccess,
     verifyLimits,
@@ -712,7 +787,10 @@ authenticated.post(
 );
 
 authenticated.post(
-    "/resource/:resourceId/roles/remove",
+    [
+        "/resource/:resourceId/roles/remove",
+        "/public-resource/:resourceId/roles/remove"
+    ],
     verifyApiKeyResourceAccess,
     verifyApiKeyRoleAccess,
     verifyLimits,
@@ -722,7 +800,10 @@ authenticated.post(
 );
 
 authenticated.post(
-    "/resource/:resourceId/users/add",
+    [
+        "/resource/:resourceId/users/add",
+        "/public-resource/:resourceId/users/add"
+    ],
     verifyApiKeyResourceAccess,
     verifyApiKeySetResourceUsers,
     verifyLimits,
@@ -732,7 +813,10 @@ authenticated.post(
 );
 
 authenticated.post(
-    "/resource/:resourceId/users/remove",
+    [
+        "/resource/:resourceId/users/remove",
+        "/public-resource/:resourceId/users/remove"
+    ],
     verifyApiKeyResourceAccess,
     verifyApiKeySetResourceUsers,
     verifyLimits,
@@ -742,7 +826,7 @@ authenticated.post(
 );
 
 authenticated.post(
-    `/resource/:resourceId/password`,
+    [`/resource/:resourceId/password`, `/public-resource/:resourceId/password`],
     verifyApiKeyResourceAccess,
     verifyLimits,
     verifyApiKeyHasAction(ActionsEnum.setResourcePassword),
@@ -751,7 +835,7 @@ authenticated.post(
 );
 
 authenticated.post(
-    `/resource/:resourceId/pincode`,
+    [`/resource/:resourceId/pincode`, `/public-resource/:resourceId/pincode`],
     verifyApiKeyResourceAccess,
     verifyLimits,
     verifyApiKeyHasAction(ActionsEnum.setResourcePincode),
@@ -760,7 +844,10 @@ authenticated.post(
 );
 
 authenticated.post(
-    `/resource/:resourceId/header-auth`,
+    [
+        `/resource/:resourceId/header-auth`,
+        `/public-resource/:resourceId/header-auth`
+    ],
     verifyApiKeyResourceAccess,
     verifyLimits,
     verifyApiKeyHasAction(ActionsEnum.setResourceHeaderAuth),
@@ -769,7 +856,10 @@ authenticated.post(
 );
 
 authenticated.post(
-    `/resource/:resourceId/whitelist`,
+    [
+        `/resource/:resourceId/whitelist`,
+        `/public-resource/:resourceId/whitelist`
+    ],
     verifyApiKeyResourceAccess,
     verifyLimits,
     verifyApiKeyHasAction(ActionsEnum.setResourceWhitelist),
@@ -778,7 +868,10 @@ authenticated.post(
 );
 
 authenticated.post(
-    `/resource/:resourceId/whitelist/add`,
+    [
+        `/resource/:resourceId/whitelist/add`,
+        `/public-resource/:resourceId/whitelist/add`
+    ],
     verifyApiKeyResourceAccess,
     verifyLimits,
     verifyApiKeyHasAction(ActionsEnum.setResourceWhitelist),
@@ -786,7 +879,10 @@ authenticated.post(
 );
 
 authenticated.post(
-    `/resource/:resourceId/whitelist/remove`,
+    [
+        `/resource/:resourceId/whitelist/remove`,
+        `/public-resource/:resourceId/whitelist/remove`
+    ],
     verifyApiKeyResourceAccess,
     verifyLimits,
     verifyApiKeyHasAction(ActionsEnum.setResourceWhitelist),
@@ -794,14 +890,20 @@ authenticated.post(
 );
 
 authenticated.get(
-    `/resource/:resourceId/whitelist`,
+    [
+        `/resource/:resourceId/whitelist`,
+        `/public-resource/:resourceId/whitelist`
+    ],
     verifyApiKeyResourceAccess,
     verifyApiKeyHasAction(ActionsEnum.getResourceWhitelist),
     resource.getResourceWhitelist
 );
 
 authenticated.post(
-    `/resource/:resourceId/access-token`,
+    [
+        `/resource/:resourceId/access-token`,
+        `/public-resource/:resourceId/access-token`
+    ],
     verifyApiKeyResourceAccess,
     verifyLimits,
     verifyApiKeyHasAction(ActionsEnum.generateAccessToken),
@@ -825,7 +927,10 @@ authenticated.get(
 );
 
 authenticated.get(
-    `/resource/:resourceId/access-tokens`,
+    [
+        `/resource/:resourceId/access-tokens`,
+        `/public-resource/:resourceId/access-tokens`
+    ],
     verifyApiKeyResourceAccess,
     verifyApiKeyHasAction(ActionsEnum.listAccessTokens),
     accessToken.listAccessTokens
@@ -1155,7 +1260,7 @@ authenticated.get(
 );
 
 authenticated.get(
-    "/org/:orgId/resource-names",
+    ["/org/:orgId/resource-names", "/org/:orgId/public-resource-names"],
     verifyApiKeyOrgAccess,
     verifyApiKeyHasAction(ActionsEnum.listResources),
     resource.listAllResourceNames
diff --git a/server/routers/policy/getResourcePolicy.ts b/server/routers/policy/getResourcePolicy.ts
index d7513d58d..fa9102082 100644
--- a/server/routers/policy/getResourcePolicy.ts
+++ b/server/routers/policy/getResourcePolicy.ts
@@ -191,6 +191,19 @@ registry.registerPath({
     responses: {}
 });
 
+registry.registerPath({
+    method: "get",
+    path: "/public-resource-policy/{resourcePolicyId}",
+    description: "Get a resource policy by its resourcePolicyId.",
+    tags: [OpenAPITags.Policy],
+    request: {
+        params: z.object({
+            resourcePolicyId: z.number()
+        })
+    },
+    responses: {}
+});
+
 export async function getResourcePolicy(
     req: Request,
     res: Response,
diff --git a/server/routers/policy/setResourcePolicyAccessControl.ts b/server/routers/policy/setResourcePolicyAccessControl.ts
index 6c0e19b68..c59390df1 100644
--- a/server/routers/policy/setResourcePolicyAccessControl.ts
+++ b/server/routers/policy/setResourcePolicyAccessControl.ts
@@ -54,6 +54,25 @@ registry.registerPath({
     responses: {}
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/public-resource-policy/{resourceId}/access-control",
+    description:
+        "Set access control users for a resource policy, including SSO, users, roles, Identity provider.",
+    tags: [OpenAPITags.Policy, OpenAPITags.User],
+    request: {
+        params: setResourcePolicyAccessControlParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setResourcePolicyAcccessControlBodySchema
+                }
+            }
+        }
+    },
+    responses: {}
+});
+
 export async function setResourcePolicyAccessControl(
     req: Request,
     res: Response,
diff --git a/server/routers/policy/setResourcePolicyHeaderAuth.ts b/server/routers/policy/setResourcePolicyHeaderAuth.ts
index 6dba0b8a7..d47dd7239 100644
--- a/server/routers/policy/setResourcePolicyHeaderAuth.ts
+++ b/server/routers/policy/setResourcePolicyHeaderAuth.ts
@@ -43,6 +43,25 @@ registry.registerPath({
     responses: {}
 });
 
+registry.registerPath({
+    method: "put",
+    path: "/public-resource-policy/{resourcePolicyId}/header-auth",
+    description:
+        "Set or update the header authentication for a resource policy. If user and password is not provided, it will remove the header authentication.",
+    tags: [OpenAPITags.Policy],
+    request: {
+        params: setResourcePolicyHeaderAuthParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setResourcePolicyHeaderAuthBodySchema
+                }
+            }
+        }
+    },
+    responses: {}
+});
+
 export async function setResourcePolicyHeaderAuth(
     req: Request,
     res: Response,
diff --git a/server/routers/policy/setResourcePolicyPassword.ts b/server/routers/policy/setResourcePolicyPassword.ts
index dd436a7bf..1ab2e549a 100644
--- a/server/routers/policy/setResourcePolicyPassword.ts
+++ b/server/routers/policy/setResourcePolicyPassword.ts
@@ -38,6 +38,25 @@ registry.registerPath({
     responses: {}
 });
 
+registry.registerPath({
+    method: "put",
+    path: "/public-resource-policy/{resourcePolicyId}/password",
+    description:
+        "Set the password for a resource policy. Setting the password to null will remove it.",
+    tags: [OpenAPITags.Policy],
+    request: {
+        params: setResourcePolicyPasswordParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setResourcePolicyPasswordBodySchema
+                }
+            }
+        }
+    },
+    responses: {}
+});
+
 export async function setResourcePolicyPassword(
     req: Request,
     res: Response,
diff --git a/server/routers/policy/setResourcePolicyPincode.ts b/server/routers/policy/setResourcePolicyPincode.ts
index f99691275..c6849cc87 100644
--- a/server/routers/policy/setResourcePolicyPincode.ts
+++ b/server/routers/policy/setResourcePolicyPincode.ts
@@ -41,6 +41,25 @@ registry.registerPath({
     responses: {}
 });
 
+registry.registerPath({
+    method: "put",
+    path: "/public-resource-policy/{resourcePolicyId}/pincode",
+    description:
+        "Set the PIN code for a resource policy. Setting the PIN code to null will remove it.",
+    tags: [OpenAPITags.Policy],
+    request: {
+        params: setResourcePolicyPincodeParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setResourcePolicyPincodeBodySchema
+                }
+            }
+        }
+    },
+    responses: {}
+});
+
 export async function setResourcePolicyPincode(
     req: Request,
     res: Response,
diff --git a/server/routers/policy/setResourcePolicyRules.ts b/server/routers/policy/setResourcePolicyRules.ts
index dfcfb7cdb..4e0ef6e86 100644
--- a/server/routers/policy/setResourcePolicyRules.ts
+++ b/server/routers/policy/setResourcePolicyRules.ts
@@ -61,6 +61,25 @@ registry.registerPath({
     responses: {}
 });
 
+registry.registerPath({
+    method: "put",
+    path: "/public-resource-policy/{resourcePolicyId}/rules",
+    description:
+        "Set all rules for a resource policy at once. This will replace all existing rules.",
+    tags: [OpenAPITags.Policy],
+    request: {
+        params: setResourcePolicyRulesParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setResourcePolicyRulesBodySchema
+                }
+            }
+        }
+    },
+    responses: {}
+});
+
 export async function setResourcePolicyRules(
     req: Request,
     res: Response,
diff --git a/server/routers/policy/setResourcePolicyWhitelist.ts b/server/routers/policy/setResourcePolicyWhitelist.ts
index 0bffacec2..f7b6cfc82 100644
--- a/server/routers/policy/setResourcePolicyWhitelist.ts
+++ b/server/routers/policy/setResourcePolicyWhitelist.ts
@@ -46,6 +46,25 @@ registry.registerPath({
     responses: {}
 });
 
+registry.registerPath({
+    method: "put",
+    path: "/public-resource-policy/{resourcePolicyId}/whitelist",
+    description:
+        "Set email whitelist for a resource policy. This will replace all existing emails.",
+    tags: [OpenAPITags.Policy],
+    request: {
+        params: setResourcePolicyWhitelistParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setResourcePolicyWhitelistBodySchema
+                }
+            }
+        }
+    },
+    responses: {}
+});
+
 export async function setResourcePolicyWhitelist(
     req: Request,
     res: Response,
diff --git a/server/routers/policy/updateResourcePolicy.ts b/server/routers/policy/updateResourcePolicy.ts
index ad8b19639..29f9112f4 100644
--- a/server/routers/policy/updateResourcePolicy.ts
+++ b/server/routers/policy/updateResourcePolicy.ts
@@ -36,6 +36,24 @@ registry.registerPath({
     responses: {}
 });
 
+registry.registerPath({
+    method: "put",
+    path: "/public-resource-policy/{resourcePolicyId}",
+    description: "Update a resource policy.",
+    tags: [OpenAPITags.Org, OpenAPITags.Policy],
+    request: {
+        params: updateResourcePolicyParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: updateResourcePolicyBodySchema
+                }
+            }
+        }
+    },
+    responses: {}
+});
+
 export async function updateResourcePolicy(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/addEmailToResourceWhitelist.ts b/server/routers/resource/addEmailToResourceWhitelist.ts
index 6d5ef22cd..06227aa47 100644
--- a/server/routers/resource/addEmailToResourceWhitelist.ts
+++ b/server/routers/resource/addEmailToResourceWhitelist.ts
@@ -63,6 +63,39 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/public-resource/{resourceId}/whitelist/add",
+    description: "Add a single email to the resource whitelist.",
+    tags: [OpenAPITags.PublicResource],
+    request: {
+        params: addEmailToResourceWhitelistParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: addEmailToResourceWhitelistBodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function addEmailToResourceWhitelist(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/addRoleToResource.ts b/server/routers/resource/addRoleToResource.ts
index a1d493631..fd5867aba 100644
--- a/server/routers/resource/addRoleToResource.ts
+++ b/server/routers/resource/addRoleToResource.ts
@@ -59,6 +59,40 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/public-resource/{resourceId}/roles/add",
+    description:
+        "Add a single role to a resource. When the resource has an inline policy defined (no shared resource policy assigned), the role is added to the inline policy instead of directly to the resource.",
+    tags: [OpenAPITags.PublicResource, OpenAPITags.Role],
+    request: {
+        params: addRoleToResourceParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: addRoleToResourceBodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function addRoleToResource(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/addUserToResource.ts b/server/routers/resource/addUserToResource.ts
index ebe43fccd..124645742 100644
--- a/server/routers/resource/addUserToResource.ts
+++ b/server/routers/resource/addUserToResource.ts
@@ -59,6 +59,40 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/public-resource/{resourceId}/users/add",
+    description:
+        "Add a single user to a resource. When the resource has an inline policy defined (no shared resource policy assigned), the user is added to the inline policy instead of directly to the resource.",
+    tags: [OpenAPITags.PublicResource, OpenAPITags.User],
+    request: {
+        params: addUserToResourceParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: addUserToResourceBodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function addUserToResource(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/createResource.ts b/server/routers/resource/createResource.ts
index 81c5950fb..a7af2d674 100644
--- a/server/routers/resource/createResource.ts
+++ b/server/routers/resource/createResource.ts
@@ -182,6 +182,39 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "put",
+    path: "/org/{orgId}/public-resource",
+    description: "Create a resource.",
+    tags: [OpenAPITags.PublicResource],
+    request: {
+        params: createResourceParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: createHttpResourceSchema.or(createRawResourceSchema)
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function createResource(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/createResourceRule.ts b/server/routers/resource/createResourceRule.ts
index 9d2261338..9fb71c29a 100644
--- a/server/routers/resource/createResourceRule.ts
+++ b/server/routers/resource/createResourceRule.ts
@@ -61,6 +61,39 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "put",
+    path: "/public-resource/{resourceId}/rule",
+    description: "Create a resource rule.",
+    tags: [OpenAPITags.PublicResource, OpenAPITags.Rule],
+    request: {
+        params: createResourceRuleParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: createResourceRuleSchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function createResourceRule(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/deleteResource.ts b/server/routers/resource/deleteResource.ts
index d80817360..6398e8b9f 100644
--- a/server/routers/resource/deleteResource.ts
+++ b/server/routers/resource/deleteResource.ts
@@ -44,6 +44,32 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "delete",
+    path: "/public-resource/{resourceId}",
+    description: "Delete a resource.",
+    tags: [OpenAPITags.PublicResource],
+    request: {
+        params: deleteResourceSchema
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function deleteResource(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/deleteResourceRule.ts b/server/routers/resource/deleteResourceRule.ts
index c619a693e..1b9168836 100644
--- a/server/routers/resource/deleteResourceRule.ts
+++ b/server/routers/resource/deleteResourceRule.ts
@@ -41,6 +41,32 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "delete",
+    path: "/public-resource/{resourceId}/rule/{ruleId}",
+    description: "Delete a resource rule.",
+    tags: [OpenAPITags.PublicResource, OpenAPITags.Rule],
+    request: {
+        params: deleteResourceRuleSchema
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function deleteResourceRule(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/getResource.ts b/server/routers/resource/getResource.ts
index e139ee58f..45b4dc308 100644
--- a/server/routers/resource/getResource.ts
+++ b/server/routers/resource/getResource.ts
@@ -116,6 +116,34 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "get",
+    path: "/public-resource/{resourceId}",
+    description: "Get a resource by resourceId.",
+    tags: [OpenAPITags.PublicResource],
+    request: {
+        params: z.object({
+            resourceId: z.number()
+        })
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function getResource(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/getResourcePolicies.ts b/server/routers/resource/getResourcePolicies.ts
index 6742a0bd5..7593473c1 100644
--- a/server/routers/resource/getResourcePolicies.ts
+++ b/server/routers/resource/getResourcePolicies.ts
@@ -33,6 +33,17 @@ registry.registerPath({
     responses: {}
 });
 
+registry.registerPath({
+    method: "get",
+    path: "/public-resource/{resourceId}/policies",
+    description: "Get the inline and shared policies associated with a resource.",
+    tags: [OpenAPITags.PublicResource, OpenAPITags.Policy],
+    request: {
+        params: getResourcePoliciesParamsSchema
+    },
+    responses: {}
+});
+
 export async function getResourcePolicies(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/getResourceWhitelist.ts b/server/routers/resource/getResourceWhitelist.ts
index 0bebe6a71..4b33d788d 100644
--- a/server/routers/resource/getResourceWhitelist.ts
+++ b/server/routers/resource/getResourceWhitelist.ts
@@ -66,6 +66,32 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "get",
+    path: "/public-resource/{resourceId}/whitelist",
+    description: "Get the whitelist of emails for a specific resource.",
+    tags: [OpenAPITags.PublicResource],
+    request: {
+        params: getResourceWhitelistSchema
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function getResourceWhitelist(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/listAllResourceNames.ts b/server/routers/resource/listAllResourceNames.ts
index e38a3fd69..61878ea2e 100644
--- a/server/routers/resource/listAllResourceNames.ts
+++ b/server/routers/resource/listAllResourceNames.ts
@@ -57,6 +57,34 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "get",
+    path: "/org/{orgId}/public-resource-names",
+    description: "List all resource names for an organization.",
+    tags: [OpenAPITags.PublicResource],
+    request: {
+        params: z.object({
+            orgId: z.string()
+        })
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function listAllResourceNames(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/listResourceRoles.ts b/server/routers/resource/listResourceRoles.ts
index ea4d07f64..19879c51c 100644
--- a/server/routers/resource/listResourceRoles.ts
+++ b/server/routers/resource/listResourceRoles.ts
@@ -70,6 +70,32 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "get",
+    path: "/public-resource/{resourceId}/roles",
+    description: "List all roles for a resource.",
+    tags: [OpenAPITags.PublicResource, OpenAPITags.Role],
+    request: {
+        params: listResourceRolesSchema
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function listResourceRoles(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/listResourceRules.ts b/server/routers/resource/listResourceRules.ts
index ec4cc332e..97edb07c2 100644
--- a/server/routers/resource/listResourceRules.ts
+++ b/server/routers/resource/listResourceRules.ts
@@ -94,6 +94,33 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "get",
+    path: "/public-resource/{resourceId}/rules",
+    description: "List rules for a resource.",
+    tags: [OpenAPITags.PublicResource, OpenAPITags.Rule],
+    request: {
+        params: listResourceRulesParamsSchema,
+        query: listResourceRulesSchema
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function listResourceRules(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/listResourceUsers.ts b/server/routers/resource/listResourceUsers.ts
index c99dbf0ad..5cc756aeb 100644
--- a/server/routers/resource/listResourceUsers.ts
+++ b/server/routers/resource/listResourceUsers.ts
@@ -60,6 +60,32 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "get",
+    path: "/public-resource/{resourceId}/users",
+    description: "List all users for a resource.",
+    tags: [OpenAPITags.PublicResource, OpenAPITags.User],
+    request: {
+        params: listResourceUsersSchema
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function listResourceUsers(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/listResources.ts b/server/routers/resource/listResources.ts
index e0baa49b1..e8f0f64f9 100644
--- a/server/routers/resource/listResources.ts
+++ b/server/routers/resource/listResources.ts
@@ -434,6 +434,35 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "get",
+    path: "/org/{orgId}/public-resources",
+    description: "List resources for an organization.",
+    tags: [OpenAPITags.PublicResource],
+    request: {
+        params: z.object({
+            orgId: z.string()
+        }),
+        query: listResourcesSchema
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function listResources(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/removeEmailFromResourceWhitelist.ts b/server/routers/resource/removeEmailFromResourceWhitelist.ts
index 03d961335..a2e27bc89 100644
--- a/server/routers/resource/removeEmailFromResourceWhitelist.ts
+++ b/server/routers/resource/removeEmailFromResourceWhitelist.ts
@@ -63,6 +63,39 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/public-resource/{resourceId}/whitelist/remove",
+    description: "Remove a single email from the resource whitelist.",
+    tags: [OpenAPITags.PublicResource],
+    request: {
+        params: removeEmailFromResourceWhitelistParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: removeEmailFromResourceWhitelistBodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function removeEmailFromResourceWhitelist(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/removeRoleFromResource.ts b/server/routers/resource/removeRoleFromResource.ts
index 0c4d811e2..a373ba33e 100644
--- a/server/routers/resource/removeRoleFromResource.ts
+++ b/server/routers/resource/removeRoleFromResource.ts
@@ -58,6 +58,39 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/public-resource/{resourceId}/roles/remove",
+    description: "Remove a single role from a resource.",
+    tags: [OpenAPITags.PublicResource, OpenAPITags.Role],
+    request: {
+        params: removeRoleFromResourceParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: removeRoleFromResourceBodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function removeRoleFromResource(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/removeUserFromResource.ts b/server/routers/resource/removeUserFromResource.ts
index 43a22c904..100036497 100644
--- a/server/routers/resource/removeUserFromResource.ts
+++ b/server/routers/resource/removeUserFromResource.ts
@@ -58,6 +58,39 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/public-resource/{resourceId}/users/remove",
+    description: "Remove a single user from a resource.",
+    tags: [OpenAPITags.PublicResource, OpenAPITags.User],
+    request: {
+        params: removeUserFromResourceParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: removeUserFromResourceBodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function removeUserFromResource(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/setResourceHeaderAuth.ts b/server/routers/resource/setResourceHeaderAuth.ts
index 6c5ee1788..8906515d0 100644
--- a/server/routers/resource/setResourceHeaderAuth.ts
+++ b/server/routers/resource/setResourceHeaderAuth.ts
@@ -60,6 +60,40 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/public-resource/{resourceId}/header-auth",
+    description:
+        "Set or update the header authentication for a resource. If user and password is not provided, it will remove the header authentication.",
+    tags: [OpenAPITags.PublicResource],
+    request: {
+        params: setResourceAuthMethodsParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setResourceAuthMethodsBodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function setResourceHeaderAuth(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/setResourcePassword.ts b/server/routers/resource/setResourcePassword.ts
index b52ebfe2c..5e0f7c1bf 100644
--- a/server/routers/resource/setResourcePassword.ts
+++ b/server/routers/resource/setResourcePassword.ts
@@ -58,6 +58,40 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/public-resource/{resourceId}/password",
+    description:
+        "Set the password for a resource. Setting the password to null will remove it.",
+    tags: [OpenAPITags.PublicResource],
+    request: {
+        params: setResourceAuthMethodsParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setResourceAuthMethodsBodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function setResourcePassword(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/setResourcePincode.ts b/server/routers/resource/setResourcePincode.ts
index 577b11dbf..cf8c75ea4 100644
--- a/server/routers/resource/setResourcePincode.ts
+++ b/server/routers/resource/setResourcePincode.ts
@@ -58,6 +58,40 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/public-resource/{resourceId}/pincode",
+    description:
+        "Set the PIN code for a resource. Setting the PIN code to null will remove it.",
+    tags: [OpenAPITags.PublicResource],
+    request: {
+        params: setResourceAuthMethodsParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setResourceAuthMethodsBodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function setResourcePincode(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/setResourceRoles.ts b/server/routers/resource/setResourceRoles.ts
index 681e00650..f640fa5d7 100644
--- a/server/routers/resource/setResourceRoles.ts
+++ b/server/routers/resource/setResourceRoles.ts
@@ -52,6 +52,40 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/public-resource/{resourceId}/roles",
+    description:
+        "Set roles for a resource. This will replace all existing roles. When the resource has an inline policy defined (no shared resource policy assigned), roles are set on the inline policy instead of directly on the resource.",
+    tags: [OpenAPITags.PublicResource, OpenAPITags.Role],
+    request: {
+        params: setResourceRolesParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setResourceRolesBodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function setResourceRoles(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/setResourceUsers.ts b/server/routers/resource/setResourceUsers.ts
index d292ccba2..4f7877d7c 100644
--- a/server/routers/resource/setResourceUsers.ts
+++ b/server/routers/resource/setResourceUsers.ts
@@ -52,6 +52,40 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/public-resource/{resourceId}/users",
+    description:
+        "Set users for a resource. This will replace all existing users. When the resource has an inline policy defined (no shared resource policy assigned), users are set on the inline policy instead of directly on the resource.",
+    tags: [OpenAPITags.PublicResource, OpenAPITags.User],
+    request: {
+        params: setUserResourcesParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setUserResourcesBodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function setResourceUsers(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/setResourceWhitelist.ts b/server/routers/resource/setResourceWhitelist.ts
index 10bf5b480..2b883bfad 100644
--- a/server/routers/resource/setResourceWhitelist.ts
+++ b/server/routers/resource/setResourceWhitelist.ts
@@ -66,6 +66,40 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/public-resource/{resourceId}/whitelist",
+    description:
+        "Set email whitelist for a resource. This will replace all existing emails.",
+    tags: [OpenAPITags.PublicResource],
+    request: {
+        params: setResourceWhitelistParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setResourceWhitelistBodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function setResourceWhitelist(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/updateResource.ts b/server/routers/resource/updateResource.ts
index 35995d517..6b055b860 100644
--- a/server/routers/resource/updateResource.ts
+++ b/server/routers/resource/updateResource.ts
@@ -273,6 +273,42 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/public-resource/{resourceId}",
+    description:
+        "Update a resource. Policy fields (sso, mfa, pincode, password, whitelist) update the inline policy when no shared resource policy is assigned; when a shared policy is assigned those fields override the shared policy for this resource only.",
+    tags: [OpenAPITags.PublicResource],
+    request: {
+        params: updateResourceParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: updateHttpResourceBodySchema.and(
+                        updateRawResourceBodySchema
+                    )
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function updateResource(
     req: Request,
     res: Response,
diff --git a/server/routers/resource/updateResourceRule.ts b/server/routers/resource/updateResourceRule.ts
index c724d00d2..c9f394730 100644
--- a/server/routers/resource/updateResourceRule.ts
+++ b/server/routers/resource/updateResourceRule.ts
@@ -78,6 +78,39 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/public-resource/{resourceId}/rule/{ruleId}",
+    description: "Update a resource rule.",
+    tags: [OpenAPITags.PublicResource, OpenAPITags.Rule],
+    request: {
+        params: updateResourceRuleParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: updateResourceRuleSchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function updateResourceRule(
     req: Request,
     res: Response,
diff --git a/server/routers/siteResource/addClientToSiteResource.ts b/server/routers/siteResource/addClientToSiteResource.ts
index 5e81cf8f7..da585d2c6 100644
--- a/server/routers/siteResource/addClientToSiteResource.ts
+++ b/server/routers/siteResource/addClientToSiteResource.ts
@@ -62,6 +62,40 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/private-resource/{siteResourceId}/clients/add",
+    description:
+        "Add a single client to a site resource. Clients with a userId cannot be added.",
+    tags: [OpenAPITags.PrivateResource, OpenAPITags.Client],
+    request: {
+        params: addClientToSiteResourceParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: addClientToSiteResourceBodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function addClientToSiteResource(
     req: Request,
     res: Response,
diff --git a/server/routers/siteResource/addRoleToSiteResource.ts b/server/routers/siteResource/addRoleToSiteResource.ts
index d3dd164cc..9f4922b63 100644
--- a/server/routers/siteResource/addRoleToSiteResource.ts
+++ b/server/routers/siteResource/addRoleToSiteResource.ts
@@ -62,6 +62,39 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/private-resource/{siteResourceId}/roles/add",
+    description: "Add a single role to a site resource.",
+    tags: [OpenAPITags.PrivateResource, OpenAPITags.Role],
+    request: {
+        params: addRoleToSiteResourceParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: addRoleToSiteResourceBodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function addRoleToSiteResource(
     req: Request,
     res: Response,
diff --git a/server/routers/siteResource/addUserToSiteResource.ts b/server/routers/siteResource/addUserToSiteResource.ts
index 0a93868ae..83476b189 100644
--- a/server/routers/siteResource/addUserToSiteResource.ts
+++ b/server/routers/siteResource/addUserToSiteResource.ts
@@ -62,6 +62,39 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/private-resource/{siteResourceId}/users/add",
+    description: "Add a single user to a site resource.",
+    tags: [OpenAPITags.PrivateResource, OpenAPITags.User],
+    request: {
+        params: addUserToSiteResourceParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: addUserToSiteResourceBodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function addUserToSiteResource(
     req: Request,
     res: Response,
diff --git a/server/routers/siteResource/batchAddClientToSiteResources.ts b/server/routers/siteResource/batchAddClientToSiteResources.ts
index 3eb282310..558eaee32 100644
--- a/server/routers/siteResource/batchAddClientToSiteResources.ts
+++ b/server/routers/siteResource/batchAddClientToSiteResources.ts
@@ -67,6 +67,39 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/client/{clientId}/private-resources",
+    description: "Add a machine client to multiple site resources at once.",
+    tags: [OpenAPITags.Client],
+    request: {
+        params: batchAddClientToSiteResourcesParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: batchAddClientToSiteResourcesBodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function batchAddClientToSiteResources(
     req: Request,
     res: Response,
diff --git a/server/routers/siteResource/createSiteResource.ts b/server/routers/siteResource/createSiteResource.ts
index 365053cf1..420c14beb 100644
--- a/server/routers/siteResource/createSiteResource.ts
+++ b/server/routers/siteResource/createSiteResource.ts
@@ -236,6 +236,39 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "put",
+    path: "/org/{orgId}/private-resource",
+    description: "Create a new site resource.",
+    tags: [OpenAPITags.PrivateResource],
+    request: {
+        params: createSiteResourceParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: createSiteResourceSchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function createSiteResource(
     req: Request,
     res: Response,
diff --git a/server/routers/siteResource/deleteSiteResource.ts b/server/routers/siteResource/deleteSiteResource.ts
index 63479c399..f84672acd 100644
--- a/server/routers/siteResource/deleteSiteResource.ts
+++ b/server/routers/siteResource/deleteSiteResource.ts
@@ -49,6 +49,32 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "delete",
+    path: "/private-resource/{siteResourceId}",
+    description: "Delete a site resource.",
+    tags: [OpenAPITags.PrivateResource],
+    request: {
+        params: deleteSiteResourceParamsSchema
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function deleteSiteResource(
     req: Request,
     res: Response,
diff --git a/server/routers/siteResource/getSiteResource.ts b/server/routers/siteResource/getSiteResource.ts
index f25723d4b..d2fd0385d 100644
--- a/server/routers/siteResource/getSiteResource.ts
+++ b/server/routers/siteResource/getSiteResource.ts
@@ -83,6 +83,36 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "get",
+    path: "/private-resource/{siteResourceId}",
+    description: "Get a specific site resource by siteResourceId.",
+    tags: [OpenAPITags.PrivateResource],
+    request: {
+        params: z.object({
+            siteResourceId: z.number(),
+            siteId: z.number(),
+            orgId: z.string()
+        })
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 registry.registerPath({
     method: "get",
     path: "/org/{orgId}/site/{siteId}/resource/nice/{niceId}",
diff --git a/server/routers/siteResource/listAllSiteResourcesByOrg.ts b/server/routers/siteResource/listAllSiteResourcesByOrg.ts
index 2cbbc2c4e..fbfba510e 100644
--- a/server/routers/siteResource/listAllSiteResourcesByOrg.ts
+++ b/server/routers/siteResource/listAllSiteResourcesByOrg.ts
@@ -253,6 +253,33 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "get",
+    path: "/org/{orgId}/private-resources",
+    description: "List all site resources for an organization.",
+    tags: [OpenAPITags.PrivateResource],
+    request: {
+        params: listAllSiteResourcesByOrgParamsSchema,
+        query: listAllSiteResourcesByOrgQuerySchema
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function listAllSiteResourcesByOrg(
     req: Request,
     res: Response,
diff --git a/server/routers/siteResource/listSiteResourceClients.ts b/server/routers/siteResource/listSiteResourceClients.ts
index 5ae6f6f8d..90255e8cb 100644
--- a/server/routers/siteResource/listSiteResourceClients.ts
+++ b/server/routers/siteResource/listSiteResourceClients.ts
@@ -61,6 +61,32 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "get",
+    path: "/private-resource/{siteResourceId}/clients",
+    description: "List all clients for a site resource.",
+    tags: [OpenAPITags.PrivateResource, OpenAPITags.Client],
+    request: {
+        params: listSiteResourceClientsSchema
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function listSiteResourceClients(
     req: Request,
     res: Response,
diff --git a/server/routers/siteResource/listSiteResourceRoles.ts b/server/routers/siteResource/listSiteResourceRoles.ts
index d430c8c43..51a34d7c0 100644
--- a/server/routers/siteResource/listSiteResourceRoles.ts
+++ b/server/routers/siteResource/listSiteResourceRoles.ts
@@ -62,6 +62,32 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "get",
+    path: "/private-resource/{siteResourceId}/roles",
+    description: "List all roles for a site resource.",
+    tags: [OpenAPITags.PrivateResource, OpenAPITags.Role],
+    request: {
+        params: listSiteResourceRolesSchema
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function listSiteResourceRoles(
     req: Request,
     res: Response,
diff --git a/server/routers/siteResource/listSiteResourceUsers.ts b/server/routers/siteResource/listSiteResourceUsers.ts
index d13a58d3b..00f86c588 100644
--- a/server/routers/siteResource/listSiteResourceUsers.ts
+++ b/server/routers/siteResource/listSiteResourceUsers.ts
@@ -65,6 +65,32 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "get",
+    path: "/private-resource/{siteResourceId}/users",
+    description: "List all users for a site resource.",
+    tags: [OpenAPITags.PrivateResource, OpenAPITags.User],
+    request: {
+        params: listSiteResourceUsersSchema
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function listSiteResourceUsers(
     req: Request,
     res: Response,
diff --git a/server/routers/siteResource/listSiteResources.ts b/server/routers/siteResource/listSiteResources.ts
index c97900bec..30d1bece8 100644
--- a/server/routers/siteResource/listSiteResources.ts
+++ b/server/routers/siteResource/listSiteResources.ts
@@ -90,6 +90,33 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "get",
+    path: "/org/{orgId}/site/{siteId}/private-resources",
+    description: "List site resources for a site.",
+    tags: [OpenAPITags.PrivateResource],
+    request: {
+        params: listSiteResourcesParamsSchema,
+        query: listSiteResourcesQuerySchema
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function listSiteResources(
     req: Request,
     res: Response,
diff --git a/server/routers/siteResource/removeClientFromSiteResource.ts b/server/routers/siteResource/removeClientFromSiteResource.ts
index e955dd5c6..26d735c6e 100644
--- a/server/routers/siteResource/removeClientFromSiteResource.ts
+++ b/server/routers/siteResource/removeClientFromSiteResource.ts
@@ -62,6 +62,40 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/private-resource/{siteResourceId}/clients/remove",
+    description:
+        "Remove a single client from a site resource. Clients with a userId cannot be removed.",
+    tags: [OpenAPITags.PrivateResource, OpenAPITags.Client],
+    request: {
+        params: removeClientFromSiteResourceParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: removeClientFromSiteResourceBodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function removeClientFromSiteResource(
     req: Request,
     res: Response,
diff --git a/server/routers/siteResource/removeRoleFromSiteResource.ts b/server/routers/siteResource/removeRoleFromSiteResource.ts
index 509088597..872452e48 100644
--- a/server/routers/siteResource/removeRoleFromSiteResource.ts
+++ b/server/routers/siteResource/removeRoleFromSiteResource.ts
@@ -62,6 +62,39 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/private-resource/{siteResourceId}/roles/remove",
+    description: "Remove a single role from a site resource.",
+    tags: [OpenAPITags.PrivateResource, OpenAPITags.Role],
+    request: {
+        params: removeRoleFromSiteResourceParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: removeRoleFromSiteResourceBodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function removeRoleFromSiteResource(
     req: Request,
     res: Response,
diff --git a/server/routers/siteResource/removeUserFromSiteResource.ts b/server/routers/siteResource/removeUserFromSiteResource.ts
index 3d8e1fd97..6ad275508 100644
--- a/server/routers/siteResource/removeUserFromSiteResource.ts
+++ b/server/routers/siteResource/removeUserFromSiteResource.ts
@@ -62,6 +62,39 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/private-resource/{siteResourceId}/users/remove",
+    description: "Remove a single user from a site resource.",
+    tags: [OpenAPITags.PrivateResource, OpenAPITags.User],
+    request: {
+        params: removeUserFromSiteResourceParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: removeUserFromSiteResourceBodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function removeUserFromSiteResource(
     req: Request,
     res: Response,
diff --git a/server/routers/siteResource/setSiteResourceClients.ts b/server/routers/siteResource/setSiteResourceClients.ts
index 59dff6ef9..43f61666f 100644
--- a/server/routers/siteResource/setSiteResourceClients.ts
+++ b/server/routers/siteResource/setSiteResourceClients.ts
@@ -62,6 +62,40 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/private-resource/{siteResourceId}/clients",
+    description:
+        "Set clients for a site resource. This will replace all existing clients. Clients with a userId cannot be added.",
+    tags: [OpenAPITags.PrivateResource, OpenAPITags.Client],
+    request: {
+        params: setSiteResourceClientsParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setSiteResourceClientsBodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function setSiteResourceClients(
     req: Request,
     res: Response,
diff --git a/server/routers/siteResource/setSiteResourceRoles.ts b/server/routers/siteResource/setSiteResourceRoles.ts
index 277ef437e..cc733cc8e 100644
--- a/server/routers/siteResource/setSiteResourceRoles.ts
+++ b/server/routers/siteResource/setSiteResourceRoles.ts
@@ -63,6 +63,40 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/private-resource/{siteResourceId}/roles",
+    description:
+        "Set roles for a site resource. This will replace all existing roles.",
+    tags: [OpenAPITags.PrivateResource, OpenAPITags.Role],
+    request: {
+        params: setSiteResourceRolesParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setSiteResourceRolesBodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function setSiteResourceRoles(
     req: Request,
     res: Response,
diff --git a/server/routers/siteResource/setSiteResourceUsers.ts b/server/routers/siteResource/setSiteResourceUsers.ts
index 4a423bf06..0ad912831 100644
--- a/server/routers/siteResource/setSiteResourceUsers.ts
+++ b/server/routers/siteResource/setSiteResourceUsers.ts
@@ -64,6 +64,40 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/private-resource/{siteResourceId}/users",
+    description:
+        "Set users for a site resource. This will replace all existing users.",
+    tags: [OpenAPITags.PrivateResource, OpenAPITags.User],
+    request: {
+        params: setSiteResourceUsersParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setSiteResourceUsersBodySchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function setSiteResourceUsers(
     req: Request,
     res: Response,
diff --git a/server/routers/siteResource/updateSiteResource.ts b/server/routers/siteResource/updateSiteResource.ts
index 0ccf29908..6c3c23e3f 100644
--- a/server/routers/siteResource/updateSiteResource.ts
+++ b/server/routers/siteResource/updateSiteResource.ts
@@ -242,6 +242,39 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "post",
+    path: "/private-resource/{siteResourceId}",
+    description: "Update a site resource.",
+    tags: [OpenAPITags.PrivateResource],
+    request: {
+        params: updateSiteResourceParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: updateSiteResourceSchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function updateSiteResource(
     req: Request,
     res: Response,
diff --git a/server/routers/target/createTarget.ts b/server/routers/target/createTarget.ts
index 289f47c76..8d4ed3696 100644
--- a/server/routers/target/createTarget.ts
+++ b/server/routers/target/createTarget.ts
@@ -122,6 +122,39 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "put",
+    path: "/public-resource/{resourceId}/target",
+    description: "Create a target for a resource.",
+    tags: [OpenAPITags.PublicResource, OpenAPITags.Target],
+    request: {
+        params: createTargetParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: createTargetSchema
+                }
+            }
+        }
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function createTarget(
     req: Request,
     res: Response,
diff --git a/server/routers/target/listTargets.ts b/server/routers/target/listTargets.ts
index 68f80197a..b22476023 100644
--- a/server/routers/target/listTargets.ts
+++ b/server/routers/target/listTargets.ts
@@ -115,6 +115,33 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "get",
+    path: "/public-resource/{resourceId}/targets",
+    description: "List targets for a resource.",
+    tags: [OpenAPITags.PublicResource, OpenAPITags.Target],
+    request: {
+        params: listTargetsParamsSchema,
+        query: listTargetsSchema
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        data: z.record(z.string(), z.any()).nullable(),
+                        success: z.boolean(),
+                        error: z.boolean(),
+                        message: z.string(),
+                        status: z.number()
+                    })
+                }
+            }
+        }
+    }
+});
+
 export async function listTargets(
     req: Request,
     res: Response,

From 17e03457e1ead9ab68ac28b97f2fe6cd0e85f8c4 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Fri, 10 Jul 2026 15:52:37 -0400
Subject: [PATCH 85/94] Recategorize

---
 server/openApi.ts                                    |  2 ++
 .../routers/resource/addEmailToResourceWhitelist.ts  |  7 ++-----
 server/routers/resource/createResource.ts            |  2 +-
 server/routers/resource/deleteResource.ts            |  2 +-
 server/routers/resource/getResource.ts               |  4 ++--
 server/routers/resource/getResourceWhitelist.ts      |  2 +-
 server/routers/resource/listAllResourceNames.ts      |  2 +-
 server/routers/resource/listResources.ts             |  2 +-
 .../resource/removeEmailFromResourceWhitelist.ts     | 12 +++---------
 server/routers/resource/setResourceHeaderAuth.ts     |  2 +-
 server/routers/resource/setResourcePassword.ts       |  2 +-
 server/routers/resource/setResourcePincode.ts        |  2 +-
 server/routers/resource/setResourceWhitelist.ts      |  2 +-
 server/routers/resource/updateResource.ts            |  2 +-
 server/routers/siteResource/createSiteResource.ts    |  2 +-
 server/routers/siteResource/deleteSiteResource.ts    |  2 +-
 server/routers/siteResource/getSiteResource.ts       |  2 +-
 .../siteResource/listAllSiteResourcesByOrg.ts        |  2 +-
 server/routers/siteResource/listSiteResources.ts     |  2 +-
 server/routers/siteResource/updateSiteResource.ts    |  2 +-
 20 files changed, 25 insertions(+), 32 deletions(-)

diff --git a/server/openApi.ts b/server/openApi.ts
index 63625192d..cb9ad5dc8 100644
--- a/server/openApi.ts
+++ b/server/openApi.ts
@@ -6,7 +6,9 @@ export enum OpenAPITags {
     Site = "Site",
     Org = "Organization",
     PublicResource = "Public Resource",
+    PublicResourceLegacy = "Public Resource (Legacy)",
     PrivateResource = "Private Resource",
+    PrivateResourceLegacy = "Private Resource (Legacy)",
     Policy = "Policy",
     Role = "Role",
     User = "User",
diff --git a/server/routers/resource/addEmailToResourceWhitelist.ts b/server/routers/resource/addEmailToResourceWhitelist.ts
index 06227aa47..97eee29b8 100644
--- a/server/routers/resource/addEmailToResourceWhitelist.ts
+++ b/server/routers/resource/addEmailToResourceWhitelist.ts
@@ -34,7 +34,7 @@ registry.registerPath({
     method: "post",
     path: "/resource/{resourceId}/whitelist/add",
     description: "Add a single email to the resource whitelist.",
-    tags: [OpenAPITags.PublicResource],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: addEmailToResourceWhitelistParamsSchema,
         body: {
@@ -177,10 +177,7 @@ export async function addEmailToResourceWhitelist(
                 .from(resourcePolicyWhiteList)
                 .where(
                     and(
-                        eq(
-                            resourcePolicyWhiteList.resourcePolicyId,
-                            policyId
-                        ),
+                        eq(resourcePolicyWhiteList.resourcePolicyId, policyId),
                         eq(resourcePolicyWhiteList.email, email)
                     )
                 );
diff --git a/server/routers/resource/createResource.ts b/server/routers/resource/createResource.ts
index a7af2d674..ab758cc1c 100644
--- a/server/routers/resource/createResource.ts
+++ b/server/routers/resource/createResource.ts
@@ -153,7 +153,7 @@ registry.registerPath({
     method: "put",
     path: "/org/{orgId}/resource",
     description: "Create a resource.",
-    tags: [OpenAPITags.PublicResource],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: createResourceParamsSchema,
         body: {
diff --git a/server/routers/resource/deleteResource.ts b/server/routers/resource/deleteResource.ts
index 6398e8b9f..5d42761de 100644
--- a/server/routers/resource/deleteResource.ts
+++ b/server/routers/resource/deleteResource.ts
@@ -22,7 +22,7 @@ registry.registerPath({
     method: "delete",
     path: "/resource/{resourceId}",
     description: "Delete a resource.",
-    tags: [OpenAPITags.PublicResource],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: deleteResourceSchema
     },
diff --git a/server/routers/resource/getResource.ts b/server/routers/resource/getResource.ts
index 45b4dc308..b1f4108b3 100644
--- a/server/routers/resource/getResource.ts
+++ b/server/routers/resource/getResource.ts
@@ -63,7 +63,7 @@ registry.registerPath({
     path: "/org/{orgId}/resource/{niceId}",
     description:
         "Get a resource by orgId and niceId. NiceId is a readable ID for the resource and unique on a per org basis.",
-    tags: [OpenAPITags.PublicResource],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: z.object({
             orgId: z.string(),
@@ -92,7 +92,7 @@ registry.registerPath({
     method: "get",
     path: "/resource/{resourceId}",
     description: "Get a resource by resourceId.",
-    tags: [OpenAPITags.PublicResource],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: z.object({
             resourceId: z.number()
diff --git a/server/routers/resource/getResourceWhitelist.ts b/server/routers/resource/getResourceWhitelist.ts
index 4b33d788d..ca8b5d9ee 100644
--- a/server/routers/resource/getResourceWhitelist.ts
+++ b/server/routers/resource/getResourceWhitelist.ts
@@ -44,7 +44,7 @@ registry.registerPath({
     method: "get",
     path: "/resource/{resourceId}/whitelist",
     description: "Get the whitelist of emails for a specific resource.",
-    tags: [OpenAPITags.PublicResource],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: getResourceWhitelistSchema
     },
diff --git a/server/routers/resource/listAllResourceNames.ts b/server/routers/resource/listAllResourceNames.ts
index 61878ea2e..ba52a2f88 100644
--- a/server/routers/resource/listAllResourceNames.ts
+++ b/server/routers/resource/listAllResourceNames.ts
@@ -33,7 +33,7 @@ registry.registerPath({
     method: "get",
     path: "/org/{orgId}/resources-names",
     description: "List all resource names for an organization.",
-    tags: [OpenAPITags.PublicResource],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: z.object({
             orgId: z.string()
diff --git a/server/routers/resource/listResources.ts b/server/routers/resource/listResources.ts
index e8f0f64f9..cc075f23b 100644
--- a/server/routers/resource/listResources.ts
+++ b/server/routers/resource/listResources.ts
@@ -409,7 +409,7 @@ registry.registerPath({
     method: "get",
     path: "/org/{orgId}/resources",
     description: "List resources for an organization.",
-    tags: [OpenAPITags.PublicResource],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: z.object({
             orgId: z.string()
diff --git a/server/routers/resource/removeEmailFromResourceWhitelist.ts b/server/routers/resource/removeEmailFromResourceWhitelist.ts
index a2e27bc89..58631a5f3 100644
--- a/server/routers/resource/removeEmailFromResourceWhitelist.ts
+++ b/server/routers/resource/removeEmailFromResourceWhitelist.ts
@@ -34,7 +34,7 @@ registry.registerPath({
     method: "post",
     path: "/resource/{resourceId}/whitelist/remove",
     description: "Remove a single email from the resource whitelist.",
-    tags: [OpenAPITags.PublicResource],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: removeEmailFromResourceWhitelistParamsSchema,
         body: {
@@ -176,10 +176,7 @@ export async function removeEmailFromResourceWhitelist(
                 .from(resourcePolicyWhiteList)
                 .where(
                     and(
-                        eq(
-                            resourcePolicyWhiteList.resourcePolicyId,
-                            policyId
-                        ),
+                        eq(resourcePolicyWhiteList.resourcePolicyId, policyId),
                         eq(resourcePolicyWhiteList.email, email)
                     )
                 );
@@ -197,10 +194,7 @@ export async function removeEmailFromResourceWhitelist(
                 .delete(resourcePolicyWhiteList)
                 .where(
                     and(
-                        eq(
-                            resourcePolicyWhiteList.resourcePolicyId,
-                            policyId
-                        ),
+                        eq(resourcePolicyWhiteList.resourcePolicyId, policyId),
                         eq(resourcePolicyWhiteList.email, email)
                     )
                 );
diff --git a/server/routers/resource/setResourceHeaderAuth.ts b/server/routers/resource/setResourceHeaderAuth.ts
index 8906515d0..c618a2902 100644
--- a/server/routers/resource/setResourceHeaderAuth.ts
+++ b/server/routers/resource/setResourceHeaderAuth.ts
@@ -31,7 +31,7 @@ registry.registerPath({
     path: "/resource/{resourceId}/header-auth",
     description:
         "Set or update the header authentication for a resource. If user and password is not provided, it will remove the header authentication.",
-    tags: [OpenAPITags.PublicResource],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: setResourceAuthMethodsParamsSchema,
         body: {
diff --git a/server/routers/resource/setResourcePassword.ts b/server/routers/resource/setResourcePassword.ts
index 5e0f7c1bf..8a74823a9 100644
--- a/server/routers/resource/setResourcePassword.ts
+++ b/server/routers/resource/setResourcePassword.ts
@@ -29,7 +29,7 @@ registry.registerPath({
     path: "/resource/{resourceId}/password",
     description:
         "Set the password for a resource. Setting the password to null will remove it.",
-    tags: [OpenAPITags.PublicResource],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: setResourceAuthMethodsParamsSchema,
         body: {
diff --git a/server/routers/resource/setResourcePincode.ts b/server/routers/resource/setResourcePincode.ts
index cf8c75ea4..033b226e1 100644
--- a/server/routers/resource/setResourcePincode.ts
+++ b/server/routers/resource/setResourcePincode.ts
@@ -29,7 +29,7 @@ registry.registerPath({
     path: "/resource/{resourceId}/pincode",
     description:
         "Set the PIN code for a resource. Setting the PIN code to null will remove it.",
-    tags: [OpenAPITags.PublicResource],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: setResourceAuthMethodsParamsSchema,
         body: {
diff --git a/server/routers/resource/setResourceWhitelist.ts b/server/routers/resource/setResourceWhitelist.ts
index 2b883bfad..e6df96de8 100644
--- a/server/routers/resource/setResourceWhitelist.ts
+++ b/server/routers/resource/setResourceWhitelist.ts
@@ -37,7 +37,7 @@ registry.registerPath({
     path: "/resource/{resourceId}/whitelist",
     description:
         "Set email whitelist for a resource. This will replace all existing emails.",
-    tags: [OpenAPITags.PublicResource],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: setResourceWhitelistParamsSchema,
         body: {
diff --git a/server/routers/resource/updateResource.ts b/server/routers/resource/updateResource.ts
index 6b055b860..f3e0c3909 100644
--- a/server/routers/resource/updateResource.ts
+++ b/server/routers/resource/updateResource.ts
@@ -242,7 +242,7 @@ registry.registerPath({
     path: "/resource/{resourceId}",
     description:
         "Update a resource. Policy fields (sso, mfa, pincode, password, whitelist) update the inline policy when no shared resource policy is assigned; when a shared policy is assigned those fields override the shared policy for this resource only.",
-    tags: [OpenAPITags.PublicResource],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: updateResourceParamsSchema,
         body: {
diff --git a/server/routers/siteResource/createSiteResource.ts b/server/routers/siteResource/createSiteResource.ts
index 420c14beb..d3e32babd 100644
--- a/server/routers/siteResource/createSiteResource.ts
+++ b/server/routers/siteResource/createSiteResource.ts
@@ -207,7 +207,7 @@ registry.registerPath({
     method: "put",
     path: "/org/{orgId}/site-resource",
     description: "Create a new site resource.",
-    tags: [OpenAPITags.PrivateResource],
+    tags: [OpenAPITags.PrivateResourceLegacy],
     request: {
         params: createSiteResourceParamsSchema,
         body: {
diff --git a/server/routers/siteResource/deleteSiteResource.ts b/server/routers/siteResource/deleteSiteResource.ts
index f84672acd..cdb438736 100644
--- a/server/routers/siteResource/deleteSiteResource.ts
+++ b/server/routers/siteResource/deleteSiteResource.ts
@@ -27,7 +27,7 @@ registry.registerPath({
     method: "delete",
     path: "/site-resource/{siteResourceId}",
     description: "Delete a site resource.",
-    tags: [OpenAPITags.PrivateResource],
+    tags: [OpenAPITags.PrivateResourceLegacy],
     request: {
         params: deleteSiteResourceParamsSchema
     },
diff --git a/server/routers/siteResource/getSiteResource.ts b/server/routers/siteResource/getSiteResource.ts
index d2fd0385d..47a89d1b1 100644
--- a/server/routers/siteResource/getSiteResource.ts
+++ b/server/routers/siteResource/getSiteResource.ts
@@ -57,7 +57,7 @@ registry.registerPath({
     method: "get",
     path: "/site-resource/{siteResourceId}",
     description: "Get a specific site resource by siteResourceId.",
-    tags: [OpenAPITags.PrivateResource],
+    tags: [OpenAPITags.PrivateResourceLegacy],
     request: {
         params: z.object({
             siteResourceId: z.number(),
diff --git a/server/routers/siteResource/listAllSiteResourcesByOrg.ts b/server/routers/siteResource/listAllSiteResourcesByOrg.ts
index fbfba510e..50acbeb4f 100644
--- a/server/routers/siteResource/listAllSiteResourcesByOrg.ts
+++ b/server/routers/siteResource/listAllSiteResourcesByOrg.ts
@@ -230,7 +230,7 @@ registry.registerPath({
     method: "get",
     path: "/org/{orgId}/site-resources",
     description: "List all site resources for an organization.",
-    tags: [OpenAPITags.PrivateResource],
+    tags: [OpenAPITags.PrivateResourceLegacy],
     request: {
         params: listAllSiteResourcesByOrgParamsSchema,
         query: listAllSiteResourcesByOrgQuerySchema
diff --git a/server/routers/siteResource/listSiteResources.ts b/server/routers/siteResource/listSiteResources.ts
index 30d1bece8..da0ba9a49 100644
--- a/server/routers/siteResource/listSiteResources.ts
+++ b/server/routers/siteResource/listSiteResources.ts
@@ -67,7 +67,7 @@ registry.registerPath({
     method: "get",
     path: "/org/{orgId}/site/{siteId}/resources",
     description: "List site resources for a site.",
-    tags: [OpenAPITags.PrivateResource],
+    tags: [OpenAPITags.PrivateResourceLegacy],
     request: {
         params: listSiteResourcesParamsSchema,
         query: listSiteResourcesQuerySchema
diff --git a/server/routers/siteResource/updateSiteResource.ts b/server/routers/siteResource/updateSiteResource.ts
index 6c3c23e3f..7b0ef0783 100644
--- a/server/routers/siteResource/updateSiteResource.ts
+++ b/server/routers/siteResource/updateSiteResource.ts
@@ -213,7 +213,7 @@ registry.registerPath({
     method: "post",
     path: "/site-resource/{siteResourceId}",
     description: "Update a site resource.",
-    tags: [OpenAPITags.PrivateResource],
+    tags: [OpenAPITags.PrivateResourceLegacy],
     request: {
         params: updateSiteResourceParamsSchema,
         body: {

From 70e2fe1e4e632145082141f67210234f71fb0351 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Fri, 10 Jul 2026 16:01:22 -0400
Subject: [PATCH 86/94] Just add ordering

---
 server/integrationApiServer.ts |  5 +++--
 server/openApi.ts              | 21 +++++++++++++--------
 2 files changed, 16 insertions(+), 10 deletions(-)

diff --git a/server/integrationApiServer.ts b/server/integrationApiServer.ts
index 104e02d5c..56a3d47b0 100644
--- a/server/integrationApiServer.ts
+++ b/server/integrationApiServer.ts
@@ -12,7 +12,7 @@ import { logIncomingMiddleware } from "./middlewares/logIncoming";
 import helmet from "helmet";
 import swaggerUi from "swagger-ui-express";
 import { OpenApiGeneratorV3 } from "@asteasolutions/zod-to-openapi";
-import { registry } from "./openApi";
+import { registry, openApiTags } from "./openApi";
 import fs from "fs";
 import path from "path";
 import { APP_PATH } from "./lib/consts";
@@ -181,7 +181,8 @@ function getOpenApiDocumentation() {
             version: "v1",
             title: "Pangolin Integration API"
         },
-        servers: [{ url: "/v1" }]
+        servers: [{ url: "/v1" }],
+        tags: openApiTags
     });
 
     if (!process.env.DISABLE_GEN_OPENAPI) {
diff --git a/server/openApi.ts b/server/openApi.ts
index cb9ad5dc8..935b64f8d 100644
--- a/server/openApi.ts
+++ b/server/openApi.ts
@@ -4,25 +4,30 @@ export const registry = new OpenAPIRegistry();
 
 export enum OpenAPITags {
     Site = "Site",
-    Org = "Organization",
     PublicResource = "Public Resource",
-    PublicResourceLegacy = "Public Resource (Legacy)",
+    Target = "Resource Target",
     PrivateResource = "Private Resource",
-    PrivateResourceLegacy = "Private Resource (Legacy)",
+    Client = "Client",
+    Org = "Organization",
+    Domain = "Domain",
     Policy = "Policy",
     Role = "Role",
     User = "User",
-    Invitation = "User Invitation",
-    Target = "Resource Target",
     Rule = "Rule",
+    Invitation = "User Invitation",
     AccessToken = "Access Token",
     GlobalIdp = "Identity Provider (Global)",
     OrgIdp = "Identity Provider (Organization Only)",
-    Client = "Client",
     ApiKey = "API Key",
     SiteProvisioningKey = "Site Provisioning Key",
-    Domain = "Domain",
     Blueprint = "Blueprint",
     Ssh = "SSH",
-    Logs = "Logs"
+    Logs = "Logs",
+    PublicResourceLegacy = "Public Resource (Legacy)",
+    PrivateResourceLegacy = "Private Resource (Legacy)"
 }
+
+// Order here controls the order tags are displayed in Swagger UI
+export const openApiTags = Object.values(OpenAPITags).map((name) => ({
+    name
+}));

From 75afe6ece2ecabb015081b3ecaa4bdc93fd06a78 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Fri, 10 Jul 2026 16:46:16 -0400
Subject: [PATCH 87/94] Order more api routes

---
 server/routers/accessToken/generateAccessToken.ts | 2 +-
 server/routers/accessToken/listAccessTokens.ts    | 2 +-
 server/routers/resource/addRoleToResource.ts      | 2 +-
 server/routers/resource/addUserToResource.ts      | 2 +-
 server/routers/resource/createResourceRule.ts     | 2 +-
 server/routers/resource/deleteResourceRule.ts     | 2 +-
 server/routers/resource/getResourcePolicies.ts    | 8 +++++---
 server/routers/resource/listResourceRoles.ts      | 2 +-
 server/routers/resource/listResourceRules.ts      | 2 +-
 server/routers/resource/listResourceUsers.ts      | 2 +-
 server/routers/resource/removeRoleFromResource.ts | 2 +-
 server/routers/resource/removeUserFromResource.ts | 2 +-
 server/routers/resource/setResourceRoles.ts       | 2 +-
 server/routers/resource/setResourceUsers.ts       | 2 +-
 server/routers/resource/updateResourceRule.ts     | 2 +-
 server/routers/target/createTarget.ts             | 2 +-
 server/routers/target/listTargets.ts              | 2 +-
 17 files changed, 21 insertions(+), 19 deletions(-)

diff --git a/server/routers/accessToken/generateAccessToken.ts b/server/routers/accessToken/generateAccessToken.ts
index c46e94162..79eecc59a 100644
--- a/server/routers/accessToken/generateAccessToken.ts
+++ b/server/routers/accessToken/generateAccessToken.ts
@@ -45,7 +45,7 @@ registry.registerPath({
     method: "post",
     path: "/resource/{resourceId}/access-token",
     description: "Generate a new access token for a resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.AccessToken],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: generateAccssTokenParamsSchema,
         body: {
diff --git a/server/routers/accessToken/listAccessTokens.ts b/server/routers/accessToken/listAccessTokens.ts
index 0068e459a..9a8796e0b 100644
--- a/server/routers/accessToken/listAccessTokens.ts
+++ b/server/routers/accessToken/listAccessTokens.ts
@@ -159,7 +159,7 @@ registry.registerPath({
     method: "get",
     path: "/resource/{resourceId}/access-tokens",
     description: "List all access tokens for a resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.AccessToken],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: z.object({
             resourceId: z.number()
diff --git a/server/routers/resource/addRoleToResource.ts b/server/routers/resource/addRoleToResource.ts
index fd5867aba..1fac3b7db 100644
--- a/server/routers/resource/addRoleToResource.ts
+++ b/server/routers/resource/addRoleToResource.ts
@@ -30,7 +30,7 @@ registry.registerPath({
     path: "/resource/{resourceId}/roles/add",
     description:
         "Add a single role to a resource. When the resource has an inline policy defined (no shared resource policy assigned), the role is added to the inline policy instead of directly to the resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.Role],
+    tags: [OpenAPITags.PublicResourceLegacy, OpenAPITags.Role],
     request: {
         params: addRoleToResourceParamsSchema,
         body: {
diff --git a/server/routers/resource/addUserToResource.ts b/server/routers/resource/addUserToResource.ts
index 124645742..e43a1e324 100644
--- a/server/routers/resource/addUserToResource.ts
+++ b/server/routers/resource/addUserToResource.ts
@@ -30,7 +30,7 @@ registry.registerPath({
     path: "/resource/{resourceId}/users/add",
     description:
         "Add a single user to a resource. When the resource has an inline policy defined (no shared resource policy assigned), the user is added to the inline policy instead of directly to the resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.User],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: addUserToResourceParamsSchema,
         body: {
diff --git a/server/routers/resource/createResourceRule.ts b/server/routers/resource/createResourceRule.ts
index 9fb71c29a..f75922722 100644
--- a/server/routers/resource/createResourceRule.ts
+++ b/server/routers/resource/createResourceRule.ts
@@ -32,7 +32,7 @@ registry.registerPath({
     method: "put",
     path: "/resource/{resourceId}/rule",
     description: "Create a resource rule.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.Rule],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: createResourceRuleParamsSchema,
         body: {
diff --git a/server/routers/resource/deleteResourceRule.ts b/server/routers/resource/deleteResourceRule.ts
index 1b9168836..d7b7c2a65 100644
--- a/server/routers/resource/deleteResourceRule.ts
+++ b/server/routers/resource/deleteResourceRule.ts
@@ -19,7 +19,7 @@ registry.registerPath({
     method: "delete",
     path: "/resource/{resourceId}/rule/{ruleId}",
     description: "Delete a resource rule.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.Rule],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: deleteResourceRuleSchema
     },
diff --git a/server/routers/resource/getResourcePolicies.ts b/server/routers/resource/getResourcePolicies.ts
index 7593473c1..30c9e95fc 100644
--- a/server/routers/resource/getResourcePolicies.ts
+++ b/server/routers/resource/getResourcePolicies.ts
@@ -25,8 +25,9 @@ export type GetResourcePoliciesResponse = {
 registry.registerPath({
     method: "get",
     path: "/resource/{resourceId}/policies",
-    description: "Get the inline and shared policies associated with a resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.Policy],
+    description:
+        "Get the inline and shared policies associated with a resource.",
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: getResourcePoliciesParamsSchema
     },
@@ -36,7 +37,8 @@ registry.registerPath({
 registry.registerPath({
     method: "get",
     path: "/public-resource/{resourceId}/policies",
-    description: "Get the inline and shared policies associated with a resource.",
+    description:
+        "Get the inline and shared policies associated with a resource.",
     tags: [OpenAPITags.PublicResource, OpenAPITags.Policy],
     request: {
         params: getResourcePoliciesParamsSchema
diff --git a/server/routers/resource/listResourceRoles.ts b/server/routers/resource/listResourceRoles.ts
index 19879c51c..f5b84cbf9 100644
--- a/server/routers/resource/listResourceRoles.ts
+++ b/server/routers/resource/listResourceRoles.ts
@@ -48,7 +48,7 @@ registry.registerPath({
     method: "get",
     path: "/resource/{resourceId}/roles",
     description: "List all roles for a resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.Role],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: listResourceRolesSchema
     },
diff --git a/server/routers/resource/listResourceRules.ts b/server/routers/resource/listResourceRules.ts
index 97edb07c2..6b32f82bf 100644
--- a/server/routers/resource/listResourceRules.ts
+++ b/server/routers/resource/listResourceRules.ts
@@ -71,7 +71,7 @@ registry.registerPath({
     method: "get",
     path: "/resource/{resourceId}/rules",
     description: "List rules for a resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.Rule],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: listResourceRulesParamsSchema,
         query: listResourceRulesSchema
diff --git a/server/routers/resource/listResourceUsers.ts b/server/routers/resource/listResourceUsers.ts
index 5cc756aeb..afabd3052 100644
--- a/server/routers/resource/listResourceUsers.ts
+++ b/server/routers/resource/listResourceUsers.ts
@@ -38,7 +38,7 @@ registry.registerPath({
     method: "get",
     path: "/resource/{resourceId}/users",
     description: "List all users for a resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.User],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: listResourceUsersSchema
     },
diff --git a/server/routers/resource/removeRoleFromResource.ts b/server/routers/resource/removeRoleFromResource.ts
index a373ba33e..4c91773f1 100644
--- a/server/routers/resource/removeRoleFromResource.ts
+++ b/server/routers/resource/removeRoleFromResource.ts
@@ -29,7 +29,7 @@ registry.registerPath({
     method: "post",
     path: "/resource/{resourceId}/roles/remove",
     description: "Remove a single role from a resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.Role],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: removeRoleFromResourceParamsSchema,
         body: {
diff --git a/server/routers/resource/removeUserFromResource.ts b/server/routers/resource/removeUserFromResource.ts
index 100036497..d48f31983 100644
--- a/server/routers/resource/removeUserFromResource.ts
+++ b/server/routers/resource/removeUserFromResource.ts
@@ -29,7 +29,7 @@ registry.registerPath({
     method: "post",
     path: "/resource/{resourceId}/users/remove",
     description: "Remove a single user from a resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.User],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: removeUserFromResourceParamsSchema,
         body: {
diff --git a/server/routers/resource/setResourceRoles.ts b/server/routers/resource/setResourceRoles.ts
index f640fa5d7..d21cca478 100644
--- a/server/routers/resource/setResourceRoles.ts
+++ b/server/routers/resource/setResourceRoles.ts
@@ -23,7 +23,7 @@ registry.registerPath({
     path: "/resource/{resourceId}/roles",
     description:
         "Set roles for a resource. This will replace all existing roles. When the resource has an inline policy defined (no shared resource policy assigned), roles are set on the inline policy instead of directly on the resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.Role],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: setResourceRolesParamsSchema,
         body: {
diff --git a/server/routers/resource/setResourceUsers.ts b/server/routers/resource/setResourceUsers.ts
index 4f7877d7c..0ae833071 100644
--- a/server/routers/resource/setResourceUsers.ts
+++ b/server/routers/resource/setResourceUsers.ts
@@ -23,7 +23,7 @@ registry.registerPath({
     path: "/resource/{resourceId}/users",
     description:
         "Set users for a resource. This will replace all existing users. When the resource has an inline policy defined (no shared resource policy assigned), users are set on the inline policy instead of directly on the resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.User],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: setUserResourcesParamsSchema,
         body: {
diff --git a/server/routers/resource/updateResourceRule.ts b/server/routers/resource/updateResourceRule.ts
index c9f394730..0ca574017 100644
--- a/server/routers/resource/updateResourceRule.ts
+++ b/server/routers/resource/updateResourceRule.ts
@@ -49,7 +49,7 @@ registry.registerPath({
     method: "post",
     path: "/resource/{resourceId}/rule/{ruleId}",
     description: "Update a resource rule.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.Rule],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: updateResourceRuleParamsSchema,
         body: {
diff --git a/server/routers/target/createTarget.ts b/server/routers/target/createTarget.ts
index 8d4ed3696..cf2cd6b5f 100644
--- a/server/routers/target/createTarget.ts
+++ b/server/routers/target/createTarget.ts
@@ -93,7 +93,7 @@ registry.registerPath({
     method: "put",
     path: "/resource/{resourceId}/target",
     description: "Create a target for a resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.Target],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: createTargetParamsSchema,
         body: {
diff --git a/server/routers/target/listTargets.ts b/server/routers/target/listTargets.ts
index b22476023..f2d16dd21 100644
--- a/server/routers/target/listTargets.ts
+++ b/server/routers/target/listTargets.ts
@@ -92,7 +92,7 @@ registry.registerPath({
     method: "get",
     path: "/resource/{resourceId}/targets",
     description: "List targets for a resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.Target],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: listTargetsParamsSchema,
         query: listTargetsSchema

From 0b82dae01eb5c891300382890073ccd38160b7e2 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Fri, 10 Jul 2026 16:54:00 -0400
Subject: [PATCH 88/94] More route cleanup

---
 server/openApi.ts                                           | 3 ++-
 server/private/routers/policy/createResourcePolicy.ts       | 2 +-
 server/private/routers/policy/deleteResourcePolicy.ts       | 2 +-
 server/private/routers/policy/listResourcePolicies.ts       | 2 +-
 server/routers/policy/getResourcePolicy.ts                  | 6 +++---
 server/routers/policy/setResourcePolicyAccessControl.ts     | 4 ++--
 server/routers/policy/setResourcePolicyHeaderAuth.ts        | 4 ++--
 server/routers/policy/setResourcePolicyPassword.ts          | 4 ++--
 server/routers/policy/setResourcePolicyPincode.ts           | 4 ++--
 server/routers/policy/setResourcePolicyRules.ts             | 4 ++--
 server/routers/policy/setResourcePolicyWhitelist.ts         | 4 ++--
 server/routers/policy/updateResourcePolicy.ts               | 4 ++--
 server/routers/resource/getResourcePolicies.ts              | 2 +-
 server/routers/siteResource/addClientToSiteResource.ts      | 2 +-
 server/routers/siteResource/addRoleToSiteResource.ts        | 2 +-
 server/routers/siteResource/addUserToSiteResource.ts        | 2 +-
 server/routers/siteResource/listSiteResourceClients.ts      | 2 +-
 server/routers/siteResource/listSiteResourceRoles.ts        | 2 +-
 server/routers/siteResource/listSiteResourceUsers.ts        | 2 +-
 server/routers/siteResource/removeClientFromSiteResource.ts | 2 +-
 server/routers/siteResource/removeRoleFromSiteResource.ts   | 2 +-
 server/routers/siteResource/removeUserFromSiteResource.ts   | 2 +-
 server/routers/siteResource/setSiteResourceClients.ts       | 2 +-
 server/routers/siteResource/setSiteResourceRoles.ts         | 2 +-
 server/routers/siteResource/setSiteResourceUsers.ts         | 2 +-
 25 files changed, 35 insertions(+), 34 deletions(-)

diff --git a/server/openApi.ts b/server/openApi.ts
index 935b64f8d..f80165d9e 100644
--- a/server/openApi.ts
+++ b/server/openApi.ts
@@ -10,7 +10,7 @@ export enum OpenAPITags {
     Client = "Client",
     Org = "Organization",
     Domain = "Domain",
-    Policy = "Policy",
+    PublicResourcePolicy = "Public Resource Policy",
     Role = "Role",
     User = "User",
     Rule = "Rule",
@@ -23,6 +23,7 @@ export enum OpenAPITags {
     Blueprint = "Blueprint",
     Ssh = "SSH",
     Logs = "Logs",
+    PublicResourcePolicyLegacy = "Public Resource Policy (Legacy)",
     PublicResourceLegacy = "Public Resource (Legacy)",
     PrivateResourceLegacy = "Private Resource (Legacy)"
 }
diff --git a/server/private/routers/policy/createResourcePolicy.ts b/server/private/routers/policy/createResourcePolicy.ts
index 9f02b912c..5b8016286 100644
--- a/server/private/routers/policy/createResourcePolicy.ts
+++ b/server/private/routers/policy/createResourcePolicy.ts
@@ -121,7 +121,7 @@ registry.registerPath({
     method: "post",
     path: "/org/{orgId}/resource-policy",
     description: "Create a resource policy.",
-    tags: [OpenAPITags.Org, OpenAPITags.Policy],
+    tags: [OpenAPITags.Org, OpenAPITags.PublicResourcePolicy],
     request: {
         params: createResourcePolicyParamsSchema,
         body: {
diff --git a/server/private/routers/policy/deleteResourcePolicy.ts b/server/private/routers/policy/deleteResourcePolicy.ts
index a586cf3b4..6f14f1cde 100644
--- a/server/private/routers/policy/deleteResourcePolicy.ts
+++ b/server/private/routers/policy/deleteResourcePolicy.ts
@@ -31,7 +31,7 @@ registry.registerPath({
     method: "delete",
     path: "/resource-policy/{resourcePolicyId}",
     description: "Delete a resource policy.",
-    tags: [OpenAPITags.Policy],
+    tags: [OpenAPITags.PublicResourcePolicy],
     request: {
         params: deleteResourcePolicySchema
     },
diff --git a/server/private/routers/policy/listResourcePolicies.ts b/server/private/routers/policy/listResourcePolicies.ts
index a5a52d9c8..7bd17a5f5 100644
--- a/server/private/routers/policy/listResourcePolicies.ts
+++ b/server/private/routers/policy/listResourcePolicies.ts
@@ -79,7 +79,7 @@ registry.registerPath({
     method: "get",
     path: "/org/{orgId}/resource-policies",
     description: "List resource policies for an organization.",
-    tags: [OpenAPITags.Org, OpenAPITags.Policy],
+    tags: [OpenAPITags.Org, OpenAPITags.PublicResourcePolicy],
     request: {
         params: z.object({
             orgId: z.string()
diff --git a/server/routers/policy/getResourcePolicy.ts b/server/routers/policy/getResourcePolicy.ts
index fa9102082..4ce032b0b 100644
--- a/server/routers/policy/getResourcePolicy.ts
+++ b/server/routers/policy/getResourcePolicy.ts
@@ -168,7 +168,7 @@ registry.registerPath({
     path: "/org/{orgId}/resource-policy/{niceId}",
     description:
         "Get a resource policy by orgId and niceId. NiceId is a readable ID for the resource and unique on a per org basis.",
-    tags: [OpenAPITags.Org, OpenAPITags.Policy],
+    tags: [OpenAPITags.Org, OpenAPITags.PublicResourcePolicy],
     request: {
         params: z.object({
             orgId: z.string(),
@@ -182,7 +182,7 @@ registry.registerPath({
     method: "get",
     path: "/resource-policy/{resourcePolicyId}",
     description: "Get a resource policy by its resourcePolicyId.",
-    tags: [OpenAPITags.Policy],
+    tags: [OpenAPITags.PublicResourcePolicyLegacy],
     request: {
         params: z.object({
             resourcePolicyId: z.number()
@@ -195,7 +195,7 @@ registry.registerPath({
     method: "get",
     path: "/public-resource-policy/{resourcePolicyId}",
     description: "Get a resource policy by its resourcePolicyId.",
-    tags: [OpenAPITags.Policy],
+    tags: [OpenAPITags.PublicResourcePolicy],
     request: {
         params: z.object({
             resourcePolicyId: z.number()
diff --git a/server/routers/policy/setResourcePolicyAccessControl.ts b/server/routers/policy/setResourcePolicyAccessControl.ts
index c59390df1..c74a01410 100644
--- a/server/routers/policy/setResourcePolicyAccessControl.ts
+++ b/server/routers/policy/setResourcePolicyAccessControl.ts
@@ -40,7 +40,7 @@ registry.registerPath({
     path: "/resource-policy/{resourceId}/access-control",
     description:
         "Set access control users for a resource policy, including SSO, users, roles, Identity provider.",
-    tags: [OpenAPITags.Policy, OpenAPITags.User],
+    tags: [OpenAPITags.PublicResourcePolicyLegacy],
     request: {
         params: setResourcePolicyAccessControlParamsSchema,
         body: {
@@ -59,7 +59,7 @@ registry.registerPath({
     path: "/public-resource-policy/{resourceId}/access-control",
     description:
         "Set access control users for a resource policy, including SSO, users, roles, Identity provider.",
-    tags: [OpenAPITags.Policy, OpenAPITags.User],
+    tags: [OpenAPITags.PublicResourcePolicy, OpenAPITags.User],
     request: {
         params: setResourcePolicyAccessControlParamsSchema,
         body: {
diff --git a/server/routers/policy/setResourcePolicyHeaderAuth.ts b/server/routers/policy/setResourcePolicyHeaderAuth.ts
index d47dd7239..efbbedf8a 100644
--- a/server/routers/policy/setResourcePolicyHeaderAuth.ts
+++ b/server/routers/policy/setResourcePolicyHeaderAuth.ts
@@ -29,7 +29,7 @@ registry.registerPath({
     path: "/resource-policy/{resourcePolicyId}/header-auth",
     description:
         "Set or update the header authentication for a resource policy. If user and password is not provided, it will remove the header authentication.",
-    tags: [OpenAPITags.Policy],
+    tags: [OpenAPITags.PublicResourcePolicyLegacy],
     request: {
         params: setResourcePolicyHeaderAuthParamsSchema,
         body: {
@@ -48,7 +48,7 @@ registry.registerPath({
     path: "/public-resource-policy/{resourcePolicyId}/header-auth",
     description:
         "Set or update the header authentication for a resource policy. If user and password is not provided, it will remove the header authentication.",
-    tags: [OpenAPITags.Policy],
+    tags: [OpenAPITags.PublicResourcePolicy],
     request: {
         params: setResourcePolicyHeaderAuthParamsSchema,
         body: {
diff --git a/server/routers/policy/setResourcePolicyPassword.ts b/server/routers/policy/setResourcePolicyPassword.ts
index 1ab2e549a..909df6da0 100644
--- a/server/routers/policy/setResourcePolicyPassword.ts
+++ b/server/routers/policy/setResourcePolicyPassword.ts
@@ -24,7 +24,7 @@ registry.registerPath({
     path: "/resource-policy/{resourcePolicyId}/password",
     description:
         "Set the password for a resource policy. Setting the password to null will remove it.",
-    tags: [OpenAPITags.Policy],
+    tags: [OpenAPITags.PublicResourcePolicyLegacy],
     request: {
         params: setResourcePolicyPasswordParamsSchema,
         body: {
@@ -43,7 +43,7 @@ registry.registerPath({
     path: "/public-resource-policy/{resourcePolicyId}/password",
     description:
         "Set the password for a resource policy. Setting the password to null will remove it.",
-    tags: [OpenAPITags.Policy],
+    tags: [OpenAPITags.PublicResourcePolicy],
     request: {
         params: setResourcePolicyPasswordParamsSchema,
         body: {
diff --git a/server/routers/policy/setResourcePolicyPincode.ts b/server/routers/policy/setResourcePolicyPincode.ts
index c6849cc87..73fc26090 100644
--- a/server/routers/policy/setResourcePolicyPincode.ts
+++ b/server/routers/policy/setResourcePolicyPincode.ts
@@ -27,7 +27,7 @@ registry.registerPath({
     path: "/resource-policy/{resourcePolicyId}/pincode",
     description:
         "Set the PIN code for a resource policy. Setting the PIN code to null will remove it.",
-    tags: [OpenAPITags.Policy],
+    tags: [OpenAPITags.PublicResourcePolicyLegacy],
     request: {
         params: setResourcePolicyPincodeParamsSchema,
         body: {
@@ -46,7 +46,7 @@ registry.registerPath({
     path: "/public-resource-policy/{resourcePolicyId}/pincode",
     description:
         "Set the PIN code for a resource policy. Setting the PIN code to null will remove it.",
-    tags: [OpenAPITags.Policy],
+    tags: [OpenAPITags.PublicResourcePolicy],
     request: {
         params: setResourcePolicyPincodeParamsSchema,
         body: {
diff --git a/server/routers/policy/setResourcePolicyRules.ts b/server/routers/policy/setResourcePolicyRules.ts
index 4e0ef6e86..9499afa6e 100644
--- a/server/routers/policy/setResourcePolicyRules.ts
+++ b/server/routers/policy/setResourcePolicyRules.ts
@@ -47,7 +47,7 @@ registry.registerPath({
     path: "/resource-policy/{resourcePolicyId}/rules",
     description:
         "Set all rules for a resource policy at once. This will replace all existing rules.",
-    tags: [OpenAPITags.Policy],
+    tags: [OpenAPITags.PublicResourcePolicyLegacy],
     request: {
         params: setResourcePolicyRulesParamsSchema,
         body: {
@@ -66,7 +66,7 @@ registry.registerPath({
     path: "/public-resource-policy/{resourcePolicyId}/rules",
     description:
         "Set all rules for a resource policy at once. This will replace all existing rules.",
-    tags: [OpenAPITags.Policy],
+    tags: [OpenAPITags.PublicResourcePolicy],
     request: {
         params: setResourcePolicyRulesParamsSchema,
         body: {
diff --git a/server/routers/policy/setResourcePolicyWhitelist.ts b/server/routers/policy/setResourcePolicyWhitelist.ts
index f7b6cfc82..788419533 100644
--- a/server/routers/policy/setResourcePolicyWhitelist.ts
+++ b/server/routers/policy/setResourcePolicyWhitelist.ts
@@ -32,7 +32,7 @@ registry.registerPath({
     path: "/resource-policy/{resourcePolicyId}/whitelist",
     description:
         "Set email whitelist for a resource policy. This will replace all existing emails.",
-    tags: [OpenAPITags.Policy],
+    tags: [OpenAPITags.PublicResourcePolicyLegacy],
     request: {
         params: setResourcePolicyWhitelistParamsSchema,
         body: {
@@ -51,7 +51,7 @@ registry.registerPath({
     path: "/public-resource-policy/{resourcePolicyId}/whitelist",
     description:
         "Set email whitelist for a resource policy. This will replace all existing emails.",
-    tags: [OpenAPITags.Policy],
+    tags: [OpenAPITags.PublicResourcePolicy],
     request: {
         params: setResourcePolicyWhitelistParamsSchema,
         body: {
diff --git a/server/routers/policy/updateResourcePolicy.ts b/server/routers/policy/updateResourcePolicy.ts
index 29f9112f4..7e4d6c250 100644
--- a/server/routers/policy/updateResourcePolicy.ts
+++ b/server/routers/policy/updateResourcePolicy.ts
@@ -22,7 +22,7 @@ registry.registerPath({
     method: "put",
     path: "/resource-policy/{resourcePolicyId}",
     description: "Update a resource policy.",
-    tags: [OpenAPITags.Org, OpenAPITags.Policy],
+    tags: [OpenAPITags.Org, OpenAPITags.PublicResourcePolicy],
     request: {
         params: updateResourcePolicyParamsSchema,
         body: {
@@ -40,7 +40,7 @@ registry.registerPath({
     method: "put",
     path: "/public-resource-policy/{resourcePolicyId}",
     description: "Update a resource policy.",
-    tags: [OpenAPITags.Org, OpenAPITags.Policy],
+    tags: [OpenAPITags.Org, OpenAPITags.PublicResourcePolicy],
     request: {
         params: updateResourcePolicyParamsSchema,
         body: {
diff --git a/server/routers/resource/getResourcePolicies.ts b/server/routers/resource/getResourcePolicies.ts
index 30c9e95fc..b87c6caf6 100644
--- a/server/routers/resource/getResourcePolicies.ts
+++ b/server/routers/resource/getResourcePolicies.ts
@@ -39,7 +39,7 @@ registry.registerPath({
     path: "/public-resource/{resourceId}/policies",
     description:
         "Get the inline and shared policies associated with a resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.Policy],
+    tags: [OpenAPITags.PublicResource, OpenAPITags.PublicResourcePolicy],
     request: {
         params: getResourcePoliciesParamsSchema
     },
diff --git a/server/routers/siteResource/addClientToSiteResource.ts b/server/routers/siteResource/addClientToSiteResource.ts
index da585d2c6..c9ead2cbd 100644
--- a/server/routers/siteResource/addClientToSiteResource.ts
+++ b/server/routers/siteResource/addClientToSiteResource.ts
@@ -33,7 +33,7 @@ registry.registerPath({
     path: "/site-resource/{siteResourceId}/clients/add",
     description:
         "Add a single client to a site resource. Clients with a userId cannot be added.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.Client],
+    tags: [OpenAPITags.PrivateResourceLegacy],
     request: {
         params: addClientToSiteResourceParamsSchema,
         body: {
diff --git a/server/routers/siteResource/addRoleToSiteResource.ts b/server/routers/siteResource/addRoleToSiteResource.ts
index 9f4922b63..2cdae780c 100644
--- a/server/routers/siteResource/addRoleToSiteResource.ts
+++ b/server/routers/siteResource/addRoleToSiteResource.ts
@@ -33,7 +33,7 @@ registry.registerPath({
     method: "post",
     path: "/site-resource/{siteResourceId}/roles/add",
     description: "Add a single role to a site resource.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.Role],
+    tags: [OpenAPITags.PrivateResourceLegacy],
     request: {
         params: addRoleToSiteResourceParamsSchema,
         body: {
diff --git a/server/routers/siteResource/addUserToSiteResource.ts b/server/routers/siteResource/addUserToSiteResource.ts
index 83476b189..526494265 100644
--- a/server/routers/siteResource/addUserToSiteResource.ts
+++ b/server/routers/siteResource/addUserToSiteResource.ts
@@ -33,7 +33,7 @@ registry.registerPath({
     method: "post",
     path: "/site-resource/{siteResourceId}/users/add",
     description: "Add a single user to a site resource.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.User],
+    tags: [OpenAPITags.PrivateResourceLegacy],
     request: {
         params: addUserToSiteResourceParamsSchema,
         body: {
diff --git a/server/routers/siteResource/listSiteResourceClients.ts b/server/routers/siteResource/listSiteResourceClients.ts
index 90255e8cb..916345190 100644
--- a/server/routers/siteResource/listSiteResourceClients.ts
+++ b/server/routers/siteResource/listSiteResourceClients.ts
@@ -39,7 +39,7 @@ registry.registerPath({
     method: "get",
     path: "/site-resource/{siteResourceId}/clients",
     description: "List all clients for a site resource.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.Client],
+    tags: [OpenAPITags.PrivateResourceLegacy],
     request: {
         params: listSiteResourceClientsSchema
     },
diff --git a/server/routers/siteResource/listSiteResourceRoles.ts b/server/routers/siteResource/listSiteResourceRoles.ts
index 51a34d7c0..132b4fed0 100644
--- a/server/routers/siteResource/listSiteResourceRoles.ts
+++ b/server/routers/siteResource/listSiteResourceRoles.ts
@@ -40,7 +40,7 @@ registry.registerPath({
     method: "get",
     path: "/site-resource/{siteResourceId}/roles",
     description: "List all roles for a site resource.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.Role],
+    tags: [OpenAPITags.PrivateResourceLegacy],
     request: {
         params: listSiteResourceRolesSchema
     },
diff --git a/server/routers/siteResource/listSiteResourceUsers.ts b/server/routers/siteResource/listSiteResourceUsers.ts
index 00f86c588..70604d718 100644
--- a/server/routers/siteResource/listSiteResourceUsers.ts
+++ b/server/routers/siteResource/listSiteResourceUsers.ts
@@ -43,7 +43,7 @@ registry.registerPath({
     method: "get",
     path: "/site-resource/{siteResourceId}/users",
     description: "List all users for a site resource.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.User],
+    tags: [OpenAPITags.PrivateResourceLegacy],
     request: {
         params: listSiteResourceUsersSchema
     },
diff --git a/server/routers/siteResource/removeClientFromSiteResource.ts b/server/routers/siteResource/removeClientFromSiteResource.ts
index 26d735c6e..bf57668bf 100644
--- a/server/routers/siteResource/removeClientFromSiteResource.ts
+++ b/server/routers/siteResource/removeClientFromSiteResource.ts
@@ -33,7 +33,7 @@ registry.registerPath({
     path: "/site-resource/{siteResourceId}/clients/remove",
     description:
         "Remove a single client from a site resource. Clients with a userId cannot be removed.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.Client],
+    tags: [OpenAPITags.PrivateResourceLegacy],
     request: {
         params: removeClientFromSiteResourceParamsSchema,
         body: {
diff --git a/server/routers/siteResource/removeRoleFromSiteResource.ts b/server/routers/siteResource/removeRoleFromSiteResource.ts
index 872452e48..cd60b288d 100644
--- a/server/routers/siteResource/removeRoleFromSiteResource.ts
+++ b/server/routers/siteResource/removeRoleFromSiteResource.ts
@@ -33,7 +33,7 @@ registry.registerPath({
     method: "post",
     path: "/site-resource/{siteResourceId}/roles/remove",
     description: "Remove a single role from a site resource.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.Role],
+    tags: [OpenAPITags.PrivateResourceLegacy],
     request: {
         params: removeRoleFromSiteResourceParamsSchema,
         body: {
diff --git a/server/routers/siteResource/removeUserFromSiteResource.ts b/server/routers/siteResource/removeUserFromSiteResource.ts
index 6ad275508..42b719e85 100644
--- a/server/routers/siteResource/removeUserFromSiteResource.ts
+++ b/server/routers/siteResource/removeUserFromSiteResource.ts
@@ -33,7 +33,7 @@ registry.registerPath({
     method: "post",
     path: "/site-resource/{siteResourceId}/users/remove",
     description: "Remove a single user from a site resource.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.User],
+    tags: [OpenAPITags.PrivateResourceLegacy],
     request: {
         params: removeUserFromSiteResourceParamsSchema,
         body: {
diff --git a/server/routers/siteResource/setSiteResourceClients.ts b/server/routers/siteResource/setSiteResourceClients.ts
index 43f61666f..e1915badc 100644
--- a/server/routers/siteResource/setSiteResourceClients.ts
+++ b/server/routers/siteResource/setSiteResourceClients.ts
@@ -33,7 +33,7 @@ registry.registerPath({
     path: "/site-resource/{siteResourceId}/clients",
     description:
         "Set clients for a site resource. This will replace all existing clients. Clients with a userId cannot be added.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.Client],
+    tags: [OpenAPITags.PrivateResourceLegacy],
     request: {
         params: setSiteResourceClientsParamsSchema,
         body: {
diff --git a/server/routers/siteResource/setSiteResourceRoles.ts b/server/routers/siteResource/setSiteResourceRoles.ts
index cc733cc8e..7d1c8db15 100644
--- a/server/routers/siteResource/setSiteResourceRoles.ts
+++ b/server/routers/siteResource/setSiteResourceRoles.ts
@@ -34,7 +34,7 @@ registry.registerPath({
     path: "/site-resource/{siteResourceId}/roles",
     description:
         "Set roles for a site resource. This will replace all existing roles.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.Role],
+    tags: [OpenAPITags.PrivateResourceLegacy],
     request: {
         params: setSiteResourceRolesParamsSchema,
         body: {
diff --git a/server/routers/siteResource/setSiteResourceUsers.ts b/server/routers/siteResource/setSiteResourceUsers.ts
index 0ad912831..06953b927 100644
--- a/server/routers/siteResource/setSiteResourceUsers.ts
+++ b/server/routers/siteResource/setSiteResourceUsers.ts
@@ -35,7 +35,7 @@ registry.registerPath({
     path: "/site-resource/{siteResourceId}/users",
     description:
         "Set users for a site resource. This will replace all existing users.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.User],
+    tags: [OpenAPITags.PrivateResourceLegacy],
     request: {
         params: setSiteResourceUsersParamsSchema,
         body: {

From bf1cc705a5f71e21f0b2c83c940f3082ded60579 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Fri, 10 Jul 2026 17:09:56 -0400
Subject: [PATCH 89/94] Update tags

---
 server/openApi.ts                                             | 3 +++
 server/private/routers/alertRule/createAlertRule.ts           | 2 +-
 server/private/routers/alertRule/deleteAlertRule.ts           | 2 +-
 server/private/routers/alertRule/getAlertRule.ts              | 2 +-
 server/private/routers/alertRule/listAlertRules.ts            | 2 +-
 server/private/routers/alertRule/updateAlertRule.ts           | 2 +-
 .../createEventStreamingDestination.ts                        | 2 +-
 .../deleteEventStreamingDestination.ts                        | 2 +-
 .../listEventStreamingDestinations.ts                         | 2 +-
 .../updateEventStreamingDestination.ts                        | 2 +-
 server/private/routers/healthChecks/createHealthCheck.ts      | 2 +-
 server/private/routers/healthChecks/deleteHealthCheck.ts      | 2 +-
 server/private/routers/healthChecks/listHealthChecks.ts       | 2 +-
 server/private/routers/healthChecks/updateHealthCheck.ts      | 2 +-
 server/private/routers/policy/createResourcePolicy.ts         | 2 +-
 server/private/routers/policy/listResourcePolicies.ts         | 2 +-
 server/routers/policy/getResourcePolicy.ts                    | 2 +-
 server/routers/policy/updateResourcePolicy.ts                 | 4 ++--
 server/routers/site/listSites.ts                              | 2 +-
 19 files changed, 22 insertions(+), 19 deletions(-)

diff --git a/server/openApi.ts b/server/openApi.ts
index f80165d9e..27c26b2da 100644
--- a/server/openApi.ts
+++ b/server/openApi.ts
@@ -23,6 +23,9 @@ export enum OpenAPITags {
     Blueprint = "Blueprint",
     Ssh = "SSH",
     Logs = "Logs",
+    EventStreamingDestination = "Event Streaming Destination",
+    AlertRule = "Alert Rule",
+    HealthCheck = "Health Check",
     PublicResourcePolicyLegacy = "Public Resource Policy (Legacy)",
     PublicResourceLegacy = "Public Resource (Legacy)",
     PrivateResourceLegacy = "Private Resource (Legacy)"
diff --git a/server/private/routers/alertRule/createAlertRule.ts b/server/private/routers/alertRule/createAlertRule.ts
index 7a46c84ff..51cc8ea16 100644
--- a/server/private/routers/alertRule/createAlertRule.ts
+++ b/server/private/routers/alertRule/createAlertRule.ts
@@ -191,7 +191,7 @@ registry.registerPath({
     method: "put",
     path: "/org/{orgId}/alert-rule",
     description: "Create an alert rule for a specific organization.",
-    tags: [OpenAPITags.Org],
+    tags: [OpenAPITags.AlertRule],
     request: {
         params: paramsSchema,
         body: {
diff --git a/server/private/routers/alertRule/deleteAlertRule.ts b/server/private/routers/alertRule/deleteAlertRule.ts
index 0439a6622..c3a21e8ac 100644
--- a/server/private/routers/alertRule/deleteAlertRule.ts
+++ b/server/private/routers/alertRule/deleteAlertRule.ts
@@ -34,7 +34,7 @@ registry.registerPath({
     method: "delete",
     path: "/org/{orgId}/alert-rule/{alertRuleId}",
     description: "Delete an alert rule for a specific organization.",
-    tags: [OpenAPITags.Org],
+    tags: [OpenAPITags.AlertRule],
     request: {
         params: paramsSchema
     },
diff --git a/server/private/routers/alertRule/getAlertRule.ts b/server/private/routers/alertRule/getAlertRule.ts
index fcbd44f11..92a53b93e 100644
--- a/server/private/routers/alertRule/getAlertRule.ts
+++ b/server/private/routers/alertRule/getAlertRule.ts
@@ -48,7 +48,7 @@ registry.registerPath({
     method: "get",
     path: "/org/{orgId}/alert-rule/{alertRuleId}",
     description: "Get a specific alert rule for an organization.",
-    tags: [OpenAPITags.Org],
+    tags: [OpenAPITags.AlertRule],
     request: {
         params: paramsSchema
     },
diff --git a/server/private/routers/alertRule/listAlertRules.ts b/server/private/routers/alertRule/listAlertRules.ts
index 0fc720d66..c6835a45d 100644
--- a/server/private/routers/alertRule/listAlertRules.ts
+++ b/server/private/routers/alertRule/listAlertRules.ts
@@ -90,7 +90,7 @@ registry.registerPath({
     method: "get",
     path: "/org/{orgId}/alert-rules",
     description: "List all alert rules for a specific organization.",
-    tags: [OpenAPITags.Org],
+    tags: [OpenAPITags.AlertRule],
     request: {
         query: querySchema,
         params: paramsSchema
diff --git a/server/private/routers/alertRule/updateAlertRule.ts b/server/private/routers/alertRule/updateAlertRule.ts
index 690a97d29..87fa4675f 100644
--- a/server/private/routers/alertRule/updateAlertRule.ts
+++ b/server/private/routers/alertRule/updateAlertRule.ts
@@ -158,7 +158,7 @@ registry.registerPath({
     method: "post",
     path: "/org/{orgId}/alert-rule/{alertRuleId}",
     description: "Update an alert rule for a specific organization.",
-    tags: [OpenAPITags.Org],
+    tags: [OpenAPITags.AlertRule],
     request: {
         params: paramsSchema,
         body: {
diff --git a/server/private/routers/eventStreamingDestination/createEventStreamingDestination.ts b/server/private/routers/eventStreamingDestination/createEventStreamingDestination.ts
index 5050c55e8..7b000c5d8 100644
--- a/server/private/routers/eventStreamingDestination/createEventStreamingDestination.ts
+++ b/server/private/routers/eventStreamingDestination/createEventStreamingDestination.ts
@@ -52,7 +52,7 @@ registry.registerPath({
     method: "put",
     path: "/org/{orgId}/event-streaming-destination",
     description: "Create an event streaming destination for a specific organization.",
-    tags: [OpenAPITags.Org],
+    tags: [OpenAPITags.EventStreamingDestination],
     request: {
         params: paramsSchema,
         body: {
diff --git a/server/private/routers/eventStreamingDestination/deleteEventStreamingDestination.ts b/server/private/routers/eventStreamingDestination/deleteEventStreamingDestination.ts
index 5aa4bf314..c047b6c95 100644
--- a/server/private/routers/eventStreamingDestination/deleteEventStreamingDestination.ts
+++ b/server/private/routers/eventStreamingDestination/deleteEventStreamingDestination.ts
@@ -35,7 +35,7 @@ registry.registerPath({
     path: "/org/{orgId}/event-streaming-destination/{destinationId}",
     description:
         "Delete an event streaming destination for a specific organization.",
-    tags: [OpenAPITags.Org],
+    tags: [OpenAPITags.EventStreamingDestination],
     request: {
         params: paramsSchema
     },
diff --git a/server/private/routers/eventStreamingDestination/listEventStreamingDestinations.ts b/server/private/routers/eventStreamingDestination/listEventStreamingDestinations.ts
index e20f95b8e..dc741d482 100644
--- a/server/private/routers/eventStreamingDestination/listEventStreamingDestinations.ts
+++ b/server/private/routers/eventStreamingDestination/listEventStreamingDestinations.ts
@@ -109,7 +109,7 @@ registry.registerPath({
     path: "/org/{orgId}/event-streaming-destination",
     description:
         "List all event streaming destinations for a specific organization.",
-    tags: [OpenAPITags.Org],
+    tags: [OpenAPITags.EventStreamingDestination],
     request: {
         query: querySchema,
         params: paramsSchema
diff --git a/server/private/routers/eventStreamingDestination/updateEventStreamingDestination.ts b/server/private/routers/eventStreamingDestination/updateEventStreamingDestination.ts
index adbac2cca..84202bf8e 100644
--- a/server/private/routers/eventStreamingDestination/updateEventStreamingDestination.ts
+++ b/server/private/routers/eventStreamingDestination/updateEventStreamingDestination.ts
@@ -55,7 +55,7 @@ registry.registerPath({
     method: "post",
     path: "/org/{orgId}/event-streaming-destination/{destinationId}",
     description: "Update an event streaming destination for a specific organization.",
-    tags: [OpenAPITags.Org],
+    tags: [OpenAPITags.EventStreamingDestination],
     request: {
         params: paramsSchema,
         body: {
diff --git a/server/private/routers/healthChecks/createHealthCheck.ts b/server/private/routers/healthChecks/createHealthCheck.ts
index 6f49f0f18..ef7331c5f 100644
--- a/server/private/routers/healthChecks/createHealthCheck.ts
+++ b/server/private/routers/healthChecks/createHealthCheck.ts
@@ -75,7 +75,7 @@ registry.registerPath({
     method: "put",
     path: "/org/{orgId}/health-check",
     description: "Create a health check for a specific organization.",
-    tags: [OpenAPITags.Org],
+    tags: [OpenAPITags.HealthCheck],
     request: {
         params: paramsSchema,
         body: {
diff --git a/server/private/routers/healthChecks/deleteHealthCheck.ts b/server/private/routers/healthChecks/deleteHealthCheck.ts
index 90bb41e50..d51c42d81 100644
--- a/server/private/routers/healthChecks/deleteHealthCheck.ts
+++ b/server/private/routers/healthChecks/deleteHealthCheck.ts
@@ -37,7 +37,7 @@ registry.registerPath({
     method: "delete",
     path: "/org/{orgId}/health-check/{healthCheckId}",
     description: "Delete a health check for a specific organization.",
-    tags: [OpenAPITags.Org],
+    tags: [OpenAPITags.HealthCheck],
     request: {
         params: paramsSchema
     },
diff --git a/server/private/routers/healthChecks/listHealthChecks.ts b/server/private/routers/healthChecks/listHealthChecks.ts
index 0d18b881e..2e34b7f6e 100644
--- a/server/private/routers/healthChecks/listHealthChecks.ts
+++ b/server/private/routers/healthChecks/listHealthChecks.ts
@@ -63,7 +63,7 @@ registry.registerPath({
     method: "get",
     path: "/org/{orgId}/health-checks",
     description: "List health checks for an organization.",
-    tags: [OpenAPITags.Org],
+    tags: [OpenAPITags.HealthCheck],
     request: {
         params: paramsSchema,
         query: querySchema
diff --git a/server/private/routers/healthChecks/updateHealthCheck.ts b/server/private/routers/healthChecks/updateHealthCheck.ts
index 4fb7a624b..a4022d298 100644
--- a/server/private/routers/healthChecks/updateHealthCheck.ts
+++ b/server/private/routers/healthChecks/updateHealthCheck.ts
@@ -109,7 +109,7 @@ registry.registerPath({
     method: "post",
     path: "/org/{orgId}/health-check/{healthCheckId}",
     description: "Update a health check for a specific organization.",
-    tags: [OpenAPITags.Org],
+    tags: [OpenAPITags.HealthCheck],
     request: {
         params: paramsSchema,
         body: {
diff --git a/server/private/routers/policy/createResourcePolicy.ts b/server/private/routers/policy/createResourcePolicy.ts
index 5b8016286..78eace74c 100644
--- a/server/private/routers/policy/createResourcePolicy.ts
+++ b/server/private/routers/policy/createResourcePolicy.ts
@@ -121,7 +121,7 @@ registry.registerPath({
     method: "post",
     path: "/org/{orgId}/resource-policy",
     description: "Create a resource policy.",
-    tags: [OpenAPITags.Org, OpenAPITags.PublicResourcePolicy],
+    tags: [OpenAPITags.PublicResourcePolicy],
     request: {
         params: createResourcePolicyParamsSchema,
         body: {
diff --git a/server/private/routers/policy/listResourcePolicies.ts b/server/private/routers/policy/listResourcePolicies.ts
index 7bd17a5f5..af02b50c6 100644
--- a/server/private/routers/policy/listResourcePolicies.ts
+++ b/server/private/routers/policy/listResourcePolicies.ts
@@ -79,7 +79,7 @@ registry.registerPath({
     method: "get",
     path: "/org/{orgId}/resource-policies",
     description: "List resource policies for an organization.",
-    tags: [OpenAPITags.Org, OpenAPITags.PublicResourcePolicy],
+    tags: [OpenAPITags.PublicResourcePolicy],
     request: {
         params: z.object({
             orgId: z.string()
diff --git a/server/routers/policy/getResourcePolicy.ts b/server/routers/policy/getResourcePolicy.ts
index 4ce032b0b..fafa31d7d 100644
--- a/server/routers/policy/getResourcePolicy.ts
+++ b/server/routers/policy/getResourcePolicy.ts
@@ -168,7 +168,7 @@ registry.registerPath({
     path: "/org/{orgId}/resource-policy/{niceId}",
     description:
         "Get a resource policy by orgId and niceId. NiceId is a readable ID for the resource and unique on a per org basis.",
-    tags: [OpenAPITags.Org, OpenAPITags.PublicResourcePolicy],
+    tags: [OpenAPITags.PublicResourcePolicy],
     request: {
         params: z.object({
             orgId: z.string(),
diff --git a/server/routers/policy/updateResourcePolicy.ts b/server/routers/policy/updateResourcePolicy.ts
index 7e4d6c250..e395987eb 100644
--- a/server/routers/policy/updateResourcePolicy.ts
+++ b/server/routers/policy/updateResourcePolicy.ts
@@ -22,7 +22,7 @@ registry.registerPath({
     method: "put",
     path: "/resource-policy/{resourcePolicyId}",
     description: "Update a resource policy.",
-    tags: [OpenAPITags.Org, OpenAPITags.PublicResourcePolicy],
+    tags: [OpenAPITags.PublicResourcePolicy],
     request: {
         params: updateResourcePolicyParamsSchema,
         body: {
@@ -40,7 +40,7 @@ registry.registerPath({
     method: "put",
     path: "/public-resource-policy/{resourcePolicyId}",
     description: "Update a resource policy.",
-    tags: [OpenAPITags.Org, OpenAPITags.PublicResourcePolicy],
+    tags: [OpenAPITags.PublicResourcePolicy],
     request: {
         params: updateResourcePolicyParamsSchema,
         body: {
diff --git a/server/routers/site/listSites.ts b/server/routers/site/listSites.ts
index 1f8e41f26..cdc3a5630 100644
--- a/server/routers/site/listSites.ts
+++ b/server/routers/site/listSites.ts
@@ -177,7 +177,7 @@ registry.registerPath({
     method: "get",
     path: "/org/{orgId}/sites",
     description: "List all sites in an organization",
-    tags: [OpenAPITags.Org, OpenAPITags.Site],
+    tags: [OpenAPITags.Site],
     request: {
         params: listSitesParamsSchema,
         query: listSitesSchema

From adeefb9dbd5e1ee5ed669b949fb7189ffaaa34e8 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Fri, 10 Jul 2026 17:13:47 -0400
Subject: [PATCH 90/94] Add missing endpoints to api

---
 server/private/routers/integration.ts | 152 ++++++++++++++++++++++++++
 1 file changed, 152 insertions(+)

diff --git a/server/private/routers/integration.ts b/server/private/routers/integration.ts
index b613b2f27..2e53b5b9d 100644
--- a/server/private/routers/integration.ts
+++ b/server/private/routers/integration.ts
@@ -17,6 +17,10 @@ import * as logs from "#private/routers/auditLogs";
 import * as alertEvents from "#private/routers/alertEvents";
 import * as certificates from "#private/routers/certificates";
 import * as siteProvisioning from "#private/routers/siteProvisioning";
+import * as policy from "#private/routers/policy";
+import * as eventStreamingDestination from "#private/routers/eventStreamingDestination";
+import * as alertRule from "#private/routers/alertRule";
+import * as healthChecks from "#private/routers/healthChecks";
 
 import {
     verifyApiKeyHasAction,
@@ -26,6 +30,7 @@ import {
     verifyApiKeyRoleAccess,
     verifyApiKeyUserAccess,
     verifyApiKeySiteProvisioningKeyAccess,
+    verifyApiKeyResourcePolicyAccess,
     verifyLimits
 } from "@server/middlewares";
 import * as user from "#private/routers/user";
@@ -259,3 +264,150 @@ authenticated.patch(
     logActionAudit(ActionsEnum.updateSiteProvisioningKey),
     siteProvisioning.updateSiteProvisioningKey
 );
+
+authenticated.get(
+    ["/org/:orgId/resource-policies", "/org/:orgId/public-resource-policies"],
+    verifyValidLicense,
+    verifyValidSubscription(tierMatrix.resourcePolicies),
+    verifyApiKeyOrgAccess,
+    verifyLimits,
+    verifyApiKeyHasAction(ActionsEnum.listResourcePolicies),
+    logActionAudit(ActionsEnum.listResourcePolicies),
+    policy.listResourcePolicies
+);
+
+authenticated.post(
+    ["/org/:orgId/resource-policy", "/org/:orgId/public-resource-policy"],
+    verifyValidLicense,
+    verifyValidSubscription(tierMatrix.resourcePolicies),
+    verifyApiKeyOrgAccess,
+    verifyLimits,
+    verifyApiKeyHasAction(ActionsEnum.createResourcePolicy),
+    logActionAudit(ActionsEnum.createResourcePolicy),
+    policy.createResourcePolicy
+);
+
+authenticated.delete(
+    [
+        "/resource-policy/:resourcePolicyId",
+        "/public-resource-policy/:resourcePolicyId"
+    ],
+    verifyApiKeyResourcePolicyAccess,
+    verifyValidLicense,
+    verifyValidSubscription(tierMatrix.resourcePolicies),
+    verifyLimits,
+    verifyApiKeyHasAction(ActionsEnum.deleteResourcePolicy),
+    logActionAudit(ActionsEnum.deleteResourcePolicy),
+    policy.deleteResourcePolicy
+);
+
+authenticated.put(
+    "/org/:orgId/event-streaming-destination",
+    verifyApiKeyOrgAccess,
+    verifyLimits,
+    verifyApiKeyHasAction(ActionsEnum.createEventStreamingDestination),
+    logActionAudit(ActionsEnum.createEventStreamingDestination),
+    eventStreamingDestination.createEventStreamingDestination
+);
+
+authenticated.post(
+    "/org/:orgId/event-streaming-destination/:destinationId",
+    verifyApiKeyOrgAccess,
+    verifyLimits,
+    verifyApiKeyHasAction(ActionsEnum.updateEventStreamingDestination),
+    logActionAudit(ActionsEnum.updateEventStreamingDestination),
+    eventStreamingDestination.updateEventStreamingDestination
+);
+
+authenticated.delete(
+    "/org/:orgId/event-streaming-destination/:destinationId",
+    verifyApiKeyOrgAccess,
+    verifyApiKeyHasAction(ActionsEnum.deleteEventStreamingDestination),
+    logActionAudit(ActionsEnum.deleteEventStreamingDestination),
+    eventStreamingDestination.deleteEventStreamingDestination
+);
+
+authenticated.get(
+    "/org/:orgId/event-streaming-destinations",
+    verifyApiKeyOrgAccess,
+    verifyApiKeyHasAction(ActionsEnum.listEventStreamingDestinations),
+    eventStreamingDestination.listEventStreamingDestinations
+);
+
+authenticated.put(
+    "/org/:orgId/alert-rule",
+    verifyApiKeyOrgAccess,
+    verifyLimits,
+    verifyApiKeyHasAction(ActionsEnum.createAlertRule),
+    logActionAudit(ActionsEnum.createAlertRule),
+    alertRule.createAlertRule
+);
+
+authenticated.post(
+    "/org/:orgId/alert-rule/:alertRuleId",
+    verifyApiKeyOrgAccess,
+    verifyApiKeyHasAction(ActionsEnum.updateAlertRule),
+    logActionAudit(ActionsEnum.updateAlertRule),
+    alertRule.updateAlertRule
+);
+
+authenticated.delete(
+    "/org/:orgId/alert-rule/:alertRuleId",
+    verifyApiKeyOrgAccess,
+    verifyApiKeyHasAction(ActionsEnum.deleteAlertRule),
+    logActionAudit(ActionsEnum.deleteAlertRule),
+    alertRule.deleteAlertRule
+);
+
+authenticated.get(
+    "/org/:orgId/alert-rules",
+    verifyApiKeyOrgAccess,
+    verifyApiKeyHasAction(ActionsEnum.listAlertRules),
+    alertRule.listAlertRules
+);
+
+authenticated.get(
+    "/org/:orgId/alert-rule/:alertRuleId",
+    verifyApiKeyOrgAccess,
+    verifyApiKeyHasAction(ActionsEnum.getAlertRule),
+    alertRule.getAlertRule
+);
+
+authenticated.get(
+    "/org/:orgId/health-checks",
+    verifyApiKeyOrgAccess,
+    verifyApiKeyHasAction(ActionsEnum.listHealthChecks),
+    healthChecks.listHealthChecks
+);
+
+authenticated.put(
+    "/org/:orgId/health-check",
+    verifyApiKeyOrgAccess,
+    verifyLimits,
+    verifyApiKeyHasAction(ActionsEnum.createHealthCheck),
+    logActionAudit(ActionsEnum.createHealthCheck),
+    healthChecks.createHealthCheck
+);
+
+authenticated.post(
+    "/org/:orgId/health-check/:healthCheckId",
+    verifyApiKeyOrgAccess,
+    verifyApiKeyHasAction(ActionsEnum.updateHealthCheck),
+    logActionAudit(ActionsEnum.updateHealthCheck),
+    healthChecks.updateHealthCheck
+);
+
+authenticated.delete(
+    "/org/:orgId/health-check/:healthCheckId",
+    verifyApiKeyOrgAccess,
+    verifyApiKeyHasAction(ActionsEnum.deleteHealthCheck),
+    logActionAudit(ActionsEnum.deleteHealthCheck),
+    healthChecks.deleteHealthCheck
+);
+
+authenticated.get(
+    "/org/:orgId/health-check/:healthCheckId/status-history",
+    verifyApiKeyOrgAccess,
+    verifyApiKeyHasAction(ActionsEnum.getTarget),
+    healthChecks.getHealthCheckStatusHistory
+);

From f1ed4da8a4094717fae9533e4a04c58f9800e79a Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Fri, 10 Jul 2026 17:45:15 -0400
Subject: [PATCH 91/94] Move to legacy

---
 server/routers/resource/addRoleToResource.ts                 | 2 +-
 server/routers/siteResource/batchAddClientToSiteResources.ts | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/server/routers/resource/addRoleToResource.ts b/server/routers/resource/addRoleToResource.ts
index 1fac3b7db..9c5b6f0c6 100644
--- a/server/routers/resource/addRoleToResource.ts
+++ b/server/routers/resource/addRoleToResource.ts
@@ -30,7 +30,7 @@ registry.registerPath({
     path: "/resource/{resourceId}/roles/add",
     description:
         "Add a single role to a resource. When the resource has an inline policy defined (no shared resource policy assigned), the role is added to the inline policy instead of directly to the resource.",
-    tags: [OpenAPITags.PublicResourceLegacy, OpenAPITags.Role],
+    tags: [OpenAPITags.PublicResourceLegacy],
     request: {
         params: addRoleToResourceParamsSchema,
         body: {
diff --git a/server/routers/siteResource/batchAddClientToSiteResources.ts b/server/routers/siteResource/batchAddClientToSiteResources.ts
index 558eaee32..6fde3b55a 100644
--- a/server/routers/siteResource/batchAddClientToSiteResources.ts
+++ b/server/routers/siteResource/batchAddClientToSiteResources.ts
@@ -38,7 +38,7 @@ registry.registerPath({
     method: "post",
     path: "/client/{clientId}/site-resources",
     description: "Add a machine client to multiple site resources at once.",
-    tags: [OpenAPITags.Client],
+    tags: [OpenAPITags.PrivateResourceLegacy],
     request: {
         params: batchAddClientToSiteResourcesParamsSchema,
         body: {

From 2bc6b28978d9cb76e8047cbdf0c70883337892bb Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Thu, 16 Jul 2026 15:33:43 -0400
Subject: [PATCH 92/94] Unify put vs post

---
 server/routers/domain/updateDomain.ts         |  27 ++++-
 server/routers/integration.ts                 | 101 ++++++++++++++++++
 .../policy/setResourcePolicyAccessControl.ts  |  40 +++++++
 .../policy/setResourcePolicyHeaderAuth.ts     |  44 +++++++-
 .../policy/setResourcePolicyPassword.ts       |  44 +++++++-
 .../policy/setResourcePolicyPincode.ts        |  44 +++++++-
 .../routers/policy/setResourcePolicyRules.ts  |  44 +++++++-
 .../policy/setResourcePolicyWhitelist.ts      |  44 +++++++-
 server/routers/policy/updateResourcePolicy.ts |  42 +++++++-
 9 files changed, 417 insertions(+), 13 deletions(-)

diff --git a/server/routers/domain/updateDomain.ts b/server/routers/domain/updateDomain.ts
index 61b99f542..cc2a26844 100644
--- a/server/routers/domain/updateDomain.ts
+++ b/server/routers/domain/updateDomain.ts
@@ -33,7 +33,7 @@ const UpdateDomainResponseDataSchema = z.object({
 
 
 registry.registerPath({
-    method: "patch",
+    method: "post",
     path: "/org/{orgId}/domain/{domainId}",
     description: "Update a domain by domainId.",
     tags: [OpenAPITags.Domain],
@@ -55,6 +55,31 @@ registry.registerPath({
     }
 });
 
+registry.registerPath({
+    method: "patch",
+    path: "/org/{orgId}/domain/{domainId}",
+    description:
+        "Update a domain by domainId. Deprecated: use POST instead.",
+    deprecated: true,
+    tags: [OpenAPITags.Domain],
+    request: {
+        params: z.object({
+            domainId: z.string(),
+            orgId: z.string()
+        })
+    },
+    responses: {
+        200: {
+            description: "Successful response",
+            content: {
+                "application/json": {
+                    schema: createApiResponseSchema(UpdateDomainResponseDataSchema)
+                }
+            }
+        }
+    }
+});
+
 export async function updateOrgDomain(
     req: Request,
     res: Response,
diff --git a/server/routers/integration.ts b/server/routers/integration.ts
index d16efdb63..13498ad25 100644
--- a/server/routers/integration.ts
+++ b/server/routers/integration.ts
@@ -426,6 +426,15 @@ authenticated.put(
     domain.createOrgDomain
 );
 
+authenticated.post(
+    "/org/:orgId/domain/:domainId",
+    verifyApiKeyOrgAccess,
+    verifyApiKeyDomainAccess,
+    verifyApiKeyHasAction(ActionsEnum.updateOrgDomain),
+    domain.updateOrgDomain
+);
+
+// Deprecated: use POST instead. Kept for backward compatibility.
 authenticated.patch(
     "/org/:orgId/domain/:domainId",
     verifyApiKeyOrgAccess,
@@ -531,6 +540,17 @@ authenticated.post(
     resource.updateResource
 );
 
+authenticated.post(
+    [
+        "/resource-policy/:resourcePolicyId",
+        "/public-resource-policy/:resourcePolicyId"
+    ],
+    verifyApiKeyResourcePolicyAccess,
+    verifyApiKeyHasAction(ActionsEnum.updateResourcePolicy),
+    policy.updateResourcePolicy
+);
+
+// Deprecated: use POST instead. Kept for backward compatibility.
 authenticated.put(
     [
         "/resource-policy/:resourcePolicyId",
@@ -698,6 +718,22 @@ authenticated.post(
     resource.setResourceUsers
 );
 
+authenticated.post(
+    [
+        "/resource-policy/:resourcePolicyId/access-control",
+        "/public-resource-policy/:resourcePolicyId/access-control"
+    ],
+    verifyApiKeyResourcePolicyAccess,
+    verifyApiKeyRoleAccess,
+    verifyLimits,
+    verifyUserHasAction(ActionsEnum.setResourcePolicyUsers),
+    verifyUserHasAction(ActionsEnum.setResourcePolicyRoles),
+    logActionAudit(ActionsEnum.setResourcePolicyUsers),
+    logActionAudit(ActionsEnum.setResourcePolicyRoles),
+    policy.setResourcePolicyAccessControl
+);
+
+// Deprecated: use POST instead. Kept for backward compatibility.
 authenticated.put(
     [
         "/resource-policy/:resourcePolicyId/access-control",
@@ -713,6 +749,19 @@ authenticated.put(
     policy.setResourcePolicyAccessControl
 );
 
+authenticated.post(
+    [
+        "/resource-policy/:resourcePolicyId/password",
+        "/public-resource-policy/:resourcePolicyId/password"
+    ],
+    verifyApiKeyResourcePolicyAccess,
+    verifyLimits,
+    verifyApiKeyHasAction(ActionsEnum.setResourcePolicyPassword),
+    logActionAudit(ActionsEnum.setResourcePolicyPassword),
+    policy.setResourcePolicyPassword
+);
+
+// Deprecated: use POST instead. Kept for backward compatibility.
 authenticated.put(
     [
         "/resource-policy/:resourcePolicyId/password",
@@ -725,6 +774,19 @@ authenticated.put(
     policy.setResourcePolicyPassword
 );
 
+authenticated.post(
+    [
+        "/resource-policy/:resourcePolicyId/pincode",
+        "/public-resource-policy/:resourcePolicyId/pincode"
+    ],
+    verifyApiKeyResourcePolicyAccess,
+    verifyLimits,
+    verifyApiKeyHasAction(ActionsEnum.setResourcePolicyPincode),
+    logActionAudit(ActionsEnum.setResourcePolicyPincode),
+    policy.setResourcePolicyPincode
+);
+
+// Deprecated: use POST instead. Kept for backward compatibility.
 authenticated.put(
     [
         "/resource-policy/:resourcePolicyId/pincode",
@@ -737,6 +799,19 @@ authenticated.put(
     policy.setResourcePolicyPincode
 );
 
+authenticated.post(
+    [
+        "/resource-policy/:resourcePolicyId/header-auth",
+        "/public-resource-policy/:resourcePolicyId/header-auth"
+    ],
+    verifyApiKeyResourcePolicyAccess,
+    verifyLimits,
+    verifyApiKeyHasAction(ActionsEnum.setResourcePolicyHeaderAuth),
+    logActionAudit(ActionsEnum.setResourcePolicyHeaderAuth),
+    policy.setResourcePolicyHeaderAuth
+);
+
+// Deprecated: use POST instead. Kept for backward compatibility.
 authenticated.put(
     [
         "/resource-policy/:resourcePolicyId/header-auth",
@@ -749,6 +824,19 @@ authenticated.put(
     policy.setResourcePolicyHeaderAuth
 );
 
+authenticated.post(
+    [
+        "/resource-policy/:resourcePolicyId/whitelist",
+        "/public-resource-policy/:resourcePolicyId/whitelist"
+    ],
+    verifyApiKeyResourcePolicyAccess,
+    verifyLimits,
+    verifyApiKeyHasAction(ActionsEnum.setResourcePolicyWhitelist),
+    logActionAudit(ActionsEnum.setResourcePolicyWhitelist),
+    policy.setResourcePolicyWhitelist
+);
+
+// Deprecated: use POST instead. Kept for backward compatibility.
 authenticated.put(
     [
         "/resource-policy/:resourcePolicyId/whitelist",
@@ -761,6 +849,19 @@ authenticated.put(
     policy.setResourcePolicyWhitelist
 );
 
+authenticated.post(
+    [
+        "/resource-policy/:resourcePolicyId/rules",
+        "/public-resource-policy/:resourcePolicyId/rules"
+    ],
+    verifyApiKeyResourcePolicyAccess,
+    verifyLimits,
+    verifyApiKeyHasAction(ActionsEnum.setResourcePolicyRules),
+    logActionAudit(ActionsEnum.setResourcePolicyRules),
+    policy.setResourcePolicyRules
+);
+
+// Deprecated: use POST instead. Kept for backward compatibility.
 authenticated.put(
     [
         "/resource-policy/:resourcePolicyId/rules",
diff --git a/server/routers/policy/setResourcePolicyAccessControl.ts b/server/routers/policy/setResourcePolicyAccessControl.ts
index c74a01410..3af1c6eac 100644
--- a/server/routers/policy/setResourcePolicyAccessControl.ts
+++ b/server/routers/policy/setResourcePolicyAccessControl.ts
@@ -73,6 +73,46 @@ registry.registerPath({
     responses: {}
 });
 
+registry.registerPath({
+    method: "put",
+    path: "/resource-policy/{resourceId}/access-control",
+    description:
+        "Set access control users for a resource policy, including SSO, users, roles, Identity provider. Deprecated: use POST instead.",
+    deprecated: true,
+    tags: [OpenAPITags.PublicResourcePolicyLegacy],
+    request: {
+        params: setResourcePolicyAccessControlParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setResourcePolicyAcccessControlBodySchema
+                }
+            }
+        }
+    },
+    responses: {}
+});
+
+registry.registerPath({
+    method: "put",
+    path: "/public-resource-policy/{resourceId}/access-control",
+    description:
+        "Set access control users for a resource policy, including SSO, users, roles, Identity provider. Deprecated: use POST instead.",
+    deprecated: true,
+    tags: [OpenAPITags.PublicResourcePolicy, OpenAPITags.User],
+    request: {
+        params: setResourcePolicyAccessControlParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setResourcePolicyAcccessControlBodySchema
+                }
+            }
+        }
+    },
+    responses: {}
+});
+
 export async function setResourcePolicyAccessControl(
     req: Request,
     res: Response,
diff --git a/server/routers/policy/setResourcePolicyHeaderAuth.ts b/server/routers/policy/setResourcePolicyHeaderAuth.ts
index efbbedf8a..6c9c2dc49 100644
--- a/server/routers/policy/setResourcePolicyHeaderAuth.ts
+++ b/server/routers/policy/setResourcePolicyHeaderAuth.ts
@@ -25,7 +25,7 @@ const setResourcePolicyHeaderAuthBodySchema = z.strictObject({
 });
 
 registry.registerPath({
-    method: "put",
+    method: "post",
     path: "/resource-policy/{resourcePolicyId}/header-auth",
     description:
         "Set or update the header authentication for a resource policy. If user and password is not provided, it will remove the header authentication.",
@@ -44,7 +44,7 @@ registry.registerPath({
 });
 
 registry.registerPath({
-    method: "put",
+    method: "post",
     path: "/public-resource-policy/{resourcePolicyId}/header-auth",
     description:
         "Set or update the header authentication for a resource policy. If user and password is not provided, it will remove the header authentication.",
@@ -62,6 +62,46 @@ registry.registerPath({
     responses: {}
 });
 
+registry.registerPath({
+    method: "put",
+    path: "/resource-policy/{resourcePolicyId}/header-auth",
+    description:
+        "Set or update the header authentication for a resource policy. If user and password is not provided, it will remove the header authentication. Deprecated: use POST instead.",
+    deprecated: true,
+    tags: [OpenAPITags.PublicResourcePolicyLegacy],
+    request: {
+        params: setResourcePolicyHeaderAuthParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setResourcePolicyHeaderAuthBodySchema
+                }
+            }
+        }
+    },
+    responses: {}
+});
+
+registry.registerPath({
+    method: "put",
+    path: "/public-resource-policy/{resourcePolicyId}/header-auth",
+    description:
+        "Set or update the header authentication for a resource policy. If user and password is not provided, it will remove the header authentication. Deprecated: use POST instead.",
+    deprecated: true,
+    tags: [OpenAPITags.PublicResourcePolicy],
+    request: {
+        params: setResourcePolicyHeaderAuthParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setResourcePolicyHeaderAuthBodySchema
+                }
+            }
+        }
+    },
+    responses: {}
+});
+
 export async function setResourcePolicyHeaderAuth(
     req: Request,
     res: Response,
diff --git a/server/routers/policy/setResourcePolicyPassword.ts b/server/routers/policy/setResourcePolicyPassword.ts
index 909df6da0..1255245e8 100644
--- a/server/routers/policy/setResourcePolicyPassword.ts
+++ b/server/routers/policy/setResourcePolicyPassword.ts
@@ -20,7 +20,7 @@ const setResourcePolicyPasswordBodySchema = z.strictObject({
 });
 
 registry.registerPath({
-    method: "put",
+    method: "post",
     path: "/resource-policy/{resourcePolicyId}/password",
     description:
         "Set the password for a resource policy. Setting the password to null will remove it.",
@@ -39,7 +39,7 @@ registry.registerPath({
 });
 
 registry.registerPath({
-    method: "put",
+    method: "post",
     path: "/public-resource-policy/{resourcePolicyId}/password",
     description:
         "Set the password for a resource policy. Setting the password to null will remove it.",
@@ -57,6 +57,46 @@ registry.registerPath({
     responses: {}
 });
 
+registry.registerPath({
+    method: "put",
+    path: "/resource-policy/{resourcePolicyId}/password",
+    description:
+        "Set the password for a resource policy. Setting the password to null will remove it. Deprecated: use POST instead.",
+    deprecated: true,
+    tags: [OpenAPITags.PublicResourcePolicyLegacy],
+    request: {
+        params: setResourcePolicyPasswordParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setResourcePolicyPasswordBodySchema
+                }
+            }
+        }
+    },
+    responses: {}
+});
+
+registry.registerPath({
+    method: "put",
+    path: "/public-resource-policy/{resourcePolicyId}/password",
+    description:
+        "Set the password for a resource policy. Setting the password to null will remove it. Deprecated: use POST instead.",
+    deprecated: true,
+    tags: [OpenAPITags.PublicResourcePolicy],
+    request: {
+        params: setResourcePolicyPasswordParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setResourcePolicyPasswordBodySchema
+                }
+            }
+        }
+    },
+    responses: {}
+});
+
 export async function setResourcePolicyPassword(
     req: Request,
     res: Response,
diff --git a/server/routers/policy/setResourcePolicyPincode.ts b/server/routers/policy/setResourcePolicyPincode.ts
index 73fc26090..6537a3933 100644
--- a/server/routers/policy/setResourcePolicyPincode.ts
+++ b/server/routers/policy/setResourcePolicyPincode.ts
@@ -23,7 +23,7 @@ const setResourcePolicyPincodeBodySchema = z.strictObject({
 });
 
 registry.registerPath({
-    method: "put",
+    method: "post",
     path: "/resource-policy/{resourcePolicyId}/pincode",
     description:
         "Set the PIN code for a resource policy. Setting the PIN code to null will remove it.",
@@ -42,7 +42,7 @@ registry.registerPath({
 });
 
 registry.registerPath({
-    method: "put",
+    method: "post",
     path: "/public-resource-policy/{resourcePolicyId}/pincode",
     description:
         "Set the PIN code for a resource policy. Setting the PIN code to null will remove it.",
@@ -60,6 +60,46 @@ registry.registerPath({
     responses: {}
 });
 
+registry.registerPath({
+    method: "put",
+    path: "/resource-policy/{resourcePolicyId}/pincode",
+    description:
+        "Set the PIN code for a resource policy. Setting the PIN code to null will remove it. Deprecated: use POST instead.",
+    deprecated: true,
+    tags: [OpenAPITags.PublicResourcePolicyLegacy],
+    request: {
+        params: setResourcePolicyPincodeParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setResourcePolicyPincodeBodySchema
+                }
+            }
+        }
+    },
+    responses: {}
+});
+
+registry.registerPath({
+    method: "put",
+    path: "/public-resource-policy/{resourcePolicyId}/pincode",
+    description:
+        "Set the PIN code for a resource policy. Setting the PIN code to null will remove it. Deprecated: use POST instead.",
+    deprecated: true,
+    tags: [OpenAPITags.PublicResourcePolicy],
+    request: {
+        params: setResourcePolicyPincodeParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setResourcePolicyPincodeBodySchema
+                }
+            }
+        }
+    },
+    responses: {}
+});
+
 export async function setResourcePolicyPincode(
     req: Request,
     res: Response,
diff --git a/server/routers/policy/setResourcePolicyRules.ts b/server/routers/policy/setResourcePolicyRules.ts
index 9499afa6e..8cb5f4e09 100644
--- a/server/routers/policy/setResourcePolicyRules.ts
+++ b/server/routers/policy/setResourcePolicyRules.ts
@@ -43,7 +43,7 @@ const setResourcePolicyRulesParamsSchema = z.strictObject({
 });
 
 registry.registerPath({
-    method: "put",
+    method: "post",
     path: "/resource-policy/{resourcePolicyId}/rules",
     description:
         "Set all rules for a resource policy at once. This will replace all existing rules.",
@@ -62,7 +62,7 @@ registry.registerPath({
 });
 
 registry.registerPath({
-    method: "put",
+    method: "post",
     path: "/public-resource-policy/{resourcePolicyId}/rules",
     description:
         "Set all rules for a resource policy at once. This will replace all existing rules.",
@@ -80,6 +80,46 @@ registry.registerPath({
     responses: {}
 });
 
+registry.registerPath({
+    method: "put",
+    path: "/resource-policy/{resourcePolicyId}/rules",
+    description:
+        "Set all rules for a resource policy at once. This will replace all existing rules. Deprecated: use POST instead.",
+    deprecated: true,
+    tags: [OpenAPITags.PublicResourcePolicyLegacy],
+    request: {
+        params: setResourcePolicyRulesParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setResourcePolicyRulesBodySchema
+                }
+            }
+        }
+    },
+    responses: {}
+});
+
+registry.registerPath({
+    method: "put",
+    path: "/public-resource-policy/{resourcePolicyId}/rules",
+    description:
+        "Set all rules for a resource policy at once. This will replace all existing rules. Deprecated: use POST instead.",
+    deprecated: true,
+    tags: [OpenAPITags.PublicResourcePolicy],
+    request: {
+        params: setResourcePolicyRulesParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setResourcePolicyRulesBodySchema
+                }
+            }
+        }
+    },
+    responses: {}
+});
+
 export async function setResourcePolicyRules(
     req: Request,
     res: Response,
diff --git a/server/routers/policy/setResourcePolicyWhitelist.ts b/server/routers/policy/setResourcePolicyWhitelist.ts
index 788419533..2cdd94e98 100644
--- a/server/routers/policy/setResourcePolicyWhitelist.ts
+++ b/server/routers/policy/setResourcePolicyWhitelist.ts
@@ -28,7 +28,7 @@ const setResourcePolicyWhitelistParamsSchema = z.strictObject({
 });
 
 registry.registerPath({
-    method: "put",
+    method: "post",
     path: "/resource-policy/{resourcePolicyId}/whitelist",
     description:
         "Set email whitelist for a resource policy. This will replace all existing emails.",
@@ -47,7 +47,7 @@ registry.registerPath({
 });
 
 registry.registerPath({
-    method: "put",
+    method: "post",
     path: "/public-resource-policy/{resourcePolicyId}/whitelist",
     description:
         "Set email whitelist for a resource policy. This will replace all existing emails.",
@@ -65,6 +65,46 @@ registry.registerPath({
     responses: {}
 });
 
+registry.registerPath({
+    method: "put",
+    path: "/resource-policy/{resourcePolicyId}/whitelist",
+    description:
+        "Set email whitelist for a resource policy. This will replace all existing emails. Deprecated: use POST instead.",
+    deprecated: true,
+    tags: [OpenAPITags.PublicResourcePolicyLegacy],
+    request: {
+        params: setResourcePolicyWhitelistParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setResourcePolicyWhitelistBodySchema
+                }
+            }
+        }
+    },
+    responses: {}
+});
+
+registry.registerPath({
+    method: "put",
+    path: "/public-resource-policy/{resourcePolicyId}/whitelist",
+    description:
+        "Set email whitelist for a resource policy. This will replace all existing emails. Deprecated: use POST instead.",
+    deprecated: true,
+    tags: [OpenAPITags.PublicResourcePolicy],
+    request: {
+        params: setResourcePolicyWhitelistParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: setResourcePolicyWhitelistBodySchema
+                }
+            }
+        }
+    },
+    responses: {}
+});
+
 export async function setResourcePolicyWhitelist(
     req: Request,
     res: Response,
diff --git a/server/routers/policy/updateResourcePolicy.ts b/server/routers/policy/updateResourcePolicy.ts
index e395987eb..f42f1bc74 100644
--- a/server/routers/policy/updateResourcePolicy.ts
+++ b/server/routers/policy/updateResourcePolicy.ts
@@ -19,7 +19,7 @@ const updateResourcePolicyBodySchema = z.strictObject({
 });
 
 registry.registerPath({
-    method: "put",
+    method: "post",
     path: "/resource-policy/{resourcePolicyId}",
     description: "Update a resource policy.",
     tags: [OpenAPITags.PublicResourcePolicy],
@@ -37,7 +37,7 @@ registry.registerPath({
 });
 
 registry.registerPath({
-    method: "put",
+    method: "post",
     path: "/public-resource-policy/{resourcePolicyId}",
     description: "Update a resource policy.",
     tags: [OpenAPITags.PublicResourcePolicy],
@@ -54,6 +54,44 @@ registry.registerPath({
     responses: {}
 });
 
+registry.registerPath({
+    method: "put",
+    path: "/resource-policy/{resourcePolicyId}",
+    description: "Update a resource policy. Deprecated: use POST instead.",
+    deprecated: true,
+    tags: [OpenAPITags.PublicResourcePolicy],
+    request: {
+        params: updateResourcePolicyParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: updateResourcePolicyBodySchema
+                }
+            }
+        }
+    },
+    responses: {}
+});
+
+registry.registerPath({
+    method: "put",
+    path: "/public-resource-policy/{resourcePolicyId}",
+    description: "Update a resource policy. Deprecated: use POST instead.",
+    deprecated: true,
+    tags: [OpenAPITags.PublicResourcePolicy],
+    request: {
+        params: updateResourcePolicyParamsSchema,
+        body: {
+            content: {
+                "application/json": {
+                    schema: updateResourcePolicyBodySchema
+                }
+            }
+        }
+    },
+    responses: {}
+});
+
 export async function updateResourcePolicy(
     req: Request,
     res: Response,

From 26713b53f6006e551bfdc1a44816628dfd0e2a4b Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Mon, 20 Jul 2026 09:04:43 -0400
Subject: [PATCH 93/94] Fix #3462

---
 server/routers/resource/createResourceRule.ts | 49 +++----------
 server/routers/resource/updateResourceRule.ts | 70 ++++---------------
 2 files changed, 24 insertions(+), 95 deletions(-)

diff --git a/server/routers/resource/createResourceRule.ts b/server/routers/resource/createResourceRule.ts
index f75922722..4cb9967ed 100644
--- a/server/routers/resource/createResourceRule.ts
+++ b/server/routers/resource/createResourceRule.ts
@@ -9,16 +9,14 @@ import createHttpError from "http-errors";
 import logger from "@server/logger";
 import { fromError } from "zod-validation-error";
 import {
-    isValidCIDR,
-    isValidIP,
-    isValidUrlGlobPattern
+    RESOURCE_RULE_MATCH_TYPES,
+    getResourceRuleValueValidationError
 } from "@server/lib/validators";
 import { OpenAPITags, registry } from "@server/openApi";
-import { isValidRegionId } from "@server/db/regions";
 
 const createResourceRuleSchema = z.strictObject({
     action: z.enum(["ACCEPT", "DROP", "PASS"]),
-    match: z.enum(["CIDR", "IP", "PATH", "COUNTRY", "ASN", "REGION"]),
+    match: z.enum(RESOURCE_RULE_MATCH_TYPES),
     value: z.string().min(1),
     priority: z.int(),
     enabled: z.boolean().optional()
@@ -151,39 +149,14 @@ export async function createResourceRule(
             );
         }
 
-        if (match === "CIDR") {
-            if (!isValidCIDR(value)) {
-                return next(
-                    createHttpError(
-                        HttpCode.BAD_REQUEST,
-                        "Invalid CIDR provided"
-                    )
-                );
-            }
-        } else if (match === "IP") {
-            if (!isValidIP(value)) {
-                return next(
-                    createHttpError(HttpCode.BAD_REQUEST, "Invalid IP provided")
-                );
-            }
-        } else if (match === "PATH") {
-            if (!isValidUrlGlobPattern(value)) {
-                return next(
-                    createHttpError(
-                        HttpCode.BAD_REQUEST,
-                        "Invalid URL glob pattern provided"
-                    )
-                );
-            }
-        } else if (match === "REGION") {
-            if (!isValidRegionId(value)) {
-                return next(
-                    createHttpError(
-                        HttpCode.BAD_REQUEST,
-                        "Invalid region ID provided"
-                    )
-                );
-            }
+        const valueValidationError = getResourceRuleValueValidationError(
+            match,
+            value
+        );
+        if (valueValidationError) {
+            return next(
+                createHttpError(HttpCode.BAD_REQUEST, valueValidationError)
+            );
         }
 
         // Create the new resource rule
diff --git a/server/routers/resource/updateResourceRule.ts b/server/routers/resource/updateResourceRule.ts
index 0ca574017..5eba8aaa0 100644
--- a/server/routers/resource/updateResourceRule.ts
+++ b/server/routers/resource/updateResourceRule.ts
@@ -9,12 +9,11 @@ import createHttpError from "http-errors";
 import logger from "@server/logger";
 import { fromError } from "zod-validation-error";
 import {
-    isValidCIDR,
-    isValidIP,
-    isValidUrlGlobPattern
+    RESOURCE_RULE_MATCH_TYPES,
+    getResourceRuleValueValidationError,
+    ResourceRuleMatchType
 } from "@server/lib/validators";
 import { OpenAPITags, registry } from "@server/openApi";
-import { isValidRegionId } from "@server/db/regions";
 
 // Define Zod schema for request parameters validation
 const updateResourceRuleParamsSchema = z.strictObject({
@@ -22,15 +21,7 @@ const updateResourceRuleParamsSchema = z.strictObject({
     resourceId: z.coerce.number().int().positive()
 });
 
-const resourceRuleMatchSchema = z.enum([
-    "CIDR",
-    "IP",
-    "PATH",
-    "COUNTRY",
-    "COUNTRY_IS_NOT",
-    "ASN",
-    "REGION"
-]);
+const resourceRuleMatchSchema = z.enum(RESOURCE_RULE_MATCH_TYPES);
 
 // Define Zod schema for request body validation
 const updateResourceRuleSchema = z
@@ -173,14 +164,7 @@ export async function updateResourceRule(
             resource.resourcePolicyId === null &&
             resource.defaultResourcePolicyId !== null;
 
-        let existingMatch:
-            | "CIDR"
-            | "IP"
-            | "PATH"
-            | "COUNTRY"
-            | "COUNTRY_IS_NOT"
-            | "ASN"
-            | "REGION";
+        let existingMatch: ResourceRuleMatchType;
 
         if (isInlinePolicy) {
             const policyId = resource.defaultResourcePolicyId!;
@@ -264,42 +248,14 @@ export async function updateResourceRule(
         const { value } = updateData;
 
         if (value !== undefined) {
-            if (match === "CIDR") {
-                if (!isValidCIDR(value)) {
-                    return next(
-                        createHttpError(
-                            HttpCode.BAD_REQUEST,
-                            "Invalid CIDR provided"
-                        )
-                    );
-                }
-            } else if (match === "IP") {
-                if (!isValidIP(value)) {
-                    return next(
-                        createHttpError(
-                            HttpCode.BAD_REQUEST,
-                            "Invalid IP provided"
-                        )
-                    );
-                }
-            } else if (match === "PATH") {
-                if (!isValidUrlGlobPattern(value)) {
-                    return next(
-                        createHttpError(
-                            HttpCode.BAD_REQUEST,
-                            "Invalid URL glob pattern provided"
-                        )
-                    );
-                }
-            } else if (match === "REGION") {
-                if (!isValidRegionId(value)) {
-                    return next(
-                        createHttpError(
-                            HttpCode.BAD_REQUEST,
-                            "Invalid region ID provided"
-                        )
-                    );
-                }
+            const valueValidationError = getResourceRuleValueValidationError(
+                match,
+                value
+            );
+            if (valueValidationError) {
+                return next(
+                    createHttpError(HttpCode.BAD_REQUEST, valueValidationError)
+                );
             }
         }
 

From df0198df9cfcf1a05146705166f8aa6ae75e5075 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Mon, 20 Jul 2026 11:37:18 -0400
Subject: [PATCH 94/94] Update internal -> private

---
 messages/en-US.json | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/messages/en-US.json b/messages/en-US.json
index 2ca25d850..aff3be28b 100644
--- a/messages/en-US.json
+++ b/messages/en-US.json
@@ -934,7 +934,7 @@
     "newtVersion": "Version",
     "architecture": "Architecture",
     "sites": "Sites",
-    "siteWgAnyClients": "Use any WireGuard client to connect. You will have to address internal resources using the peer IP.",
+    "siteWgAnyClients": "Use any WireGuard client to connect. You will have to address private resources using the peer IP.",
     "siteWgCompatibleAllClients": "Compatible with all WireGuard clients",
     "siteWgManualConfigurationRequired": "Manual configuration required",
     "userErrorNotAdminOrOwner": "User is not an admin or owner",
@@ -2361,7 +2361,7 @@
     "resourcesTableProxyResources": "Public",
     "resourcesTableClientResources": "Private",
     "resourcesTableNoProxyResourcesFound": "No proxy resources found.",
-    "resourcesTableNoInternalResourcesFound": "No internal resources found.",
+    "resourcesTableNoInternalResourcesFound": "No private resources found.",
     "resourcesTableDestination": "Destination",
     "resourcesTableAlias": "Alias",
     "resourcesTableAliasAddress": "Alias Address",
@@ -2384,9 +2384,9 @@
     "editInternalResourceDialogCancel": "Cancel",
     "editInternalResourceDialogSaveResource": "Save Resource",
     "editInternalResourceDialogSuccess": "Success",
-    "editInternalResourceDialogInternalResourceUpdatedSuccessfully": "Internal resource updated successfully",
+    "editInternalResourceDialogInternalResourceUpdatedSuccessfully": "Private resource updated successfully",
     "editInternalResourceDialogError": "Error",
-    "editInternalResourceDialogFailedToUpdateInternalResource": "Failed to update internal resource",
+    "editInternalResourceDialogFailedToUpdateInternalResource": "Failed to update private resource",
     "editInternalResourceDialogNameRequired": "Name is required",
     "editInternalResourceDialogNameMaxLength": "Name must be less than 255 characters",
     "editInternalResourceDialogProxyPortMin": "Proxy port must be at least 1",
@@ -2412,7 +2412,7 @@
     "editInternalResourceDialogAlias": "Alias",
     "editInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "createInternalResourceDialogNoSitesAvailable": "No Sites Available",
-    "createInternalResourceDialogNoSitesAvailableDescription": "You need to have at least one Newt site with a subnet configured to create internal resources.",
+    "createInternalResourceDialogNoSitesAvailableDescription": "You need to have at least one Newt site with a subnet configured to create private resources.",
     "createInternalResourceDialogClose": "Close",
     "createInternalResourceDialogCreateClientResource": "Create Private Resource",
     "createInternalResourceDialogCreateClientResourceDescription": "Create a new resource that will only be accessible to clients connected to the organization",
@@ -2441,9 +2441,9 @@
     "createInternalResourceDialogCancel": "Cancel",
     "createInternalResourceDialogCreateResource": "Create Resource",
     "createInternalResourceDialogSuccess": "Success",
-    "createInternalResourceDialogInternalResourceCreatedSuccessfully": "Internal resource created successfully",
+    "createInternalResourceDialogInternalResourceCreatedSuccessfully": "Private resource created successfully",
     "createInternalResourceDialogError": "Error",
-    "createInternalResourceDialogFailedToCreateInternalResource": "Failed to create internal resource",
+    "createInternalResourceDialogFailedToCreateInternalResource": "Failed to create private resource",
     "createInternalResourceDialogNameRequired": "Name is required",
     "createInternalResourceDialogNameMaxLength": "Name must be less than 255 characters",
     "createInternalResourceDialogPleaseSelectSite": "Please select a site",